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INTEGRATED DIGITAL/ELECTRIC AIRCRAFT CONCEPTS STUDY 



M. J. Cronin, A. P. Hays, F. B. Green, 

N. A. Radovcich, C. W. Helsley, W. L. Rutchik 


SUMMARY 

The Integrated Digital/Electric Aircraft (IDEA) is an aircraft concept 
which employs the following systems: Advanced Electrical Power Generation and 

Engine Starting, Power Distribution and Management, Electromechanical Actua- 
tion Systems, Electrical Deicing, Electrically-Driven Environmental Control 
System, Advanced Data Distribution, and Digital Flight Control System. After 
detailed trade analysis of candidate systems, preferred systems were applied 
to the baseline configuration, which contains advanced technology in all areas 
except for secondary power and flight control systems. The Baseline is a 
stretched-f uselage Lockheed L-1011 derivative carrying 350 passengers over a 
design range of 4600 n.mi. with performance benefits evaluated at the average 
stage length of 2500 n.mi. It was assumed that the advanced technologies 
would reach "technology readiness" (be at a sufficiently advanced stage of 
development for commitment to an aircraft design) in 1990 for an aircraft 
entering service in 1994. An additional configuration, the Alternate IDEA, 
was also considered. For this concept the design ground rules were relaxed in 
order to quantify additional synergistic benefits. 

The major objectives of the study were to define an IDEA configuration, 
define technical risks associated with the IDEA systems concepts, and to 
identify the research and development required activities to reduce these 
risks . 

Following a trade-off of candidate subsystems, the selected subsystems 
include: power generation - two samarium cobalt star ter/genera tors per 

engine, producing variable voltage/ variable frequency with selective conver- 
sion (to 270 Vdc or to constant voltage constant frequency); power distribu- 
tion - hybrid r ing/ dist r ibuted bus; actuators - rotary power hinge operating 
through an antijam mechanism; environmental control system - electrically 
driven vapor cycle system and air compressor; flight controls systems - 
centralized/mesh architecture, (system reliability permits -10 percent static 
stability margin). 

Benefits were determined using an aircraft performance and sizing computer 
program. When the IDEA concepts were incorporated into the design and the 
a^craft resized for the design mission, block fuel was predicted to decrease 
b> 11.3 percent, with 7-9 percent decrease in direct operating cost. The 
Alternate IDEA shown a further 3.4 percent reduction in block fuel and 3.1 
percent reduction in direct operating cost, primarily as a result of reduction 
In maximum limit maneuver load factor from 2.5 to 2.0. 

Plans show that technical risks exist in power generation ana motor 
technology (primarily associated with higher operating temperatures); power 
distribution (fault sensing, clearing and survivability); electromechanical 
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actuator 8 (cooling and anti jam design); power controllers (adequate capacity 
and cooling) flight control system (demonstration of reliability of flight- 
critical system). In these technical areas government research would be 
beneficial In reducing these risks. 


INTRODUCTION 

Desig - srs of commercial aircraft strive to provide transportation at the 
lowest possible cost consistent with such constraints as safety , reliability, 
and . om/c ,t. Aircraft operating cost Is usually measured as the sum of direct 
opeiitlt cost (DOC), usually defined by the Air Transportation Association of 
America V ATA) method, and Indirect operating cost, which involves such factors 
as paeseiger service and ground handling costs. DOC is therefore of more 
Interest to the designer, and It consists of the sum of four major terms with 
approximate contribution as follows: 


1 . 

F ight Crew 

15% 

2. 

I el and Oil 

45% 

3. 

L preclatlon 

20% 

4. 

Maintenance 

20% 


In addition. Insurance Is about 1 percent of DOC. The cost of borrowing money 
is not included. 

DOC can therefore be reduced by reducing aircraft fuel burned, purchase 
price, and maintenance costs. Both fuel burned and aircraft empty weight 
(which is closely related to purchase price) can be reduced through reduction 
of t hr tie aircraft and engine parameters - 1) aircraft drag, 2) aircraft 
ve'ght* and 3) engine specific fuel consumption (SFC). 

NAi K has had a leading role in the sponsorship of research and technology 
development to reduce operating costs. One avenue of sponsorship has con- 
cerned :he application of advanced electric and electronic technologies to 
commercial aircraft. The Lockheed-Callfornla Company has participated in two 
previous studies; the first was a study funded by the Johnson Space Center 
entitled "Application of Advanced Electr ic/Elec tronic Technologies to Conven- 
tional Aircraft" and completed in 1981 (ref. 1)* The objective of the study 
was to evaluate the benefits of advanced electric/electronic systems, as used 
In the Space Shuttle, to commercial aircraft. Building on this study, a 
second stud v was performed under funding from Langley Research Center. The 
title of this study is "Elec tronic/ Elec trie Technology Benefits Study" (ref. 
2'* This stucty qualitatively evaluated 135 separate subsystems concepts, from 
cepts such as the application of adaptive controls, to hardware such as 
powered wheels on 1 a ding gear. Of these, eight systems-orlented concepts 
vere quantitative./ evaluated: 

# Near- arm flight controls (RSS, not flight critical) 

# F^r-term flight controls (RSS, flight critical) 
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• Near-term secondary power (No engine bleed) 

• Far-term secondary power (No bleed, no hydraulics) 

• Advanced avionic components (Advanced electronics and packaging) 

• Advanced cockpit (Controls and multipurpose displays) 

• Air traffic control (Onboard and ATC system techniques) 

• Advanced systems aircraft (All of the above technologies) 

The Integrated Digital/Electric Aircraft (IDEA) concept follows these 
prior studies to incorporate two separate but related areas of technology* 

The first area of technology is the "al 1-elec trie aircraft" concept, in which 
aircraft hydraulic and pneumatic subsystems are replaced with electric actu- 
ators, electrically driven engine starters and environmental control system 
(ECS). There is a significant net weight reduction from the elimination of 
hydraulic and pneumatic hardware and ducts, and a reduction in engine SFC 
resulting from the substitution of compressor bleed with electrically driven 
compressors. The second is the application of digital control to aircraft 
flight control, and other systems. This results in more sophisticated control 
systems, which at the same time have levels of reliability comparable to that 
of the aircraft structure itself. These control systems permit active con- 
trols, such as relaxed longitudinal static stability and flutter mode sup- 
pression, which result in both weight savings and drag reduction. 

The IDEA concept promises reductions in aircraft drag, empty weight, and 
engine SFC, resulting in significant reductions in DOC. 


Object Ives 

There are three major objectives. The first is the quantification of 
benefits of the IDEA concepts to a transport aircraft entering service in the 
early 1990’s time period, (the representative aircraft selected by Lockheed is 
a 350-passenger derivative of the L-1011 with a range of 4600 n.mi.) and to 
determine whether individual or collective portions of the IDEA concepts show 
promise for new or unique transport configuration designs not considered 
feasible until now. The second objective is to define associated risks asso- 
ciated with the application of this technology. The third is to identify the 

research and development to reduce these risks for potential application to *- 

transport aircraft. | 

t w 

Quantification of benefits . - In order to quantify the benefits of IDEA 
concepts the following subsystems are applied to an advanced technology 

commercial aircraft: m 

digital flight controls (primary and secondary) 

i 

digital data distribution 
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electromecnanical actuation systems 

advanced power generation systems 

electric power distribution 

electric power management 

electric engine starting 

electric wing and engine ice protection 

electric environmental control system 

New transport configuration design . - In quantifying the benefits of the 
IDEA concepts, the aircraft design was held constant, with the exception of 
resizing the wing and engine for wing loading and thrust/weight ratio to meet 
performance constraints, and resizing the horizontal tail for relaxed longi- 
tudinal stability. An additional objective therefore is to determine whether 
further benefits accrue if the IDEA concepts permit new or unique transport 
configuration designs. The objective is embodied in the "Alternate IDEA Based 
Configuration," which has an undefined service entry date, and for which 
fundamental changes in aircraft design are permissible. 

Technology development plans . - Technologies and methodologies are iden- 
tified which must be developed and validated by 1990 to achieve the IDEA based 
configuration design. 

In addition, a subset of ttese technologies and methodologies are identi- 
fied which are consistent for government support consistert with the guide- 
lines of longterm, high risk, and high payoff. Resources and schedule 
requirements for this subset are identified. 


Approach 

Method of evaluating benefits . - The benefits are evaluated by first 
defining analytically a baseline aircraft which incorporates advanced tech- 
nologies (composites, energy efficient engine, supercritical wing, and active 
ailerons) in all areas except for the subsystems to be evaluated. These sub- 
systems are removed from the aircraft and are replaced with those incorpo- 
rating the IDEA concepts. The subsystems to be incorporated result from 
trade-offs of candidate subsystems based on weight, cost, reliability, main- 
tainability, compatibility with other subsystems, ard other factors that may 
affect selection of candidates. 

A detailed evaluation is made of the preferred subsystems in order to make 
a quantitative evaluation of the benefits of the IDEA concepts in terms of 
aircraft block fuel and DOC. This evaluation is carried out using the 
Lockheed Advanced Systems Synthesis and Evaluation Technique (ASSET) computer 
program which permits changes in aircraft component weights or performance to 
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be incorporated; the aircraft is analytically flown through its required 
mission and changes in aircraft weight, fuel, and cost readily determined. 

The Alternate IDEA Based Configuration is evaluated in a similar manner, 
but with the configuration design constraints removed. Because the service 
entry date is undefined, other IDEA concepts may be added that do not meet the 
requirements for an entry into service in the early 1990s. 

Technology development plans and risks . * Technology development plans are 
established which will reduce technology risks to an acceptable level. These 
plans were developed in cooperation with manufacturers of subsystem equipment 
to reflect the best estimate of resources required to bring the technologies 
to a state of technology readiness. 

For technologies to be incorporated into the IDEA based configuration, the 
technology development schedule is assumed which is illustrated in figure 1. 
Technology validation will be achieved by the end of 1990, leading to FAA 
Certification and entry into service in 1994. 

For the Alternate IDEA Configuration it is assumed that the certification 
date is undefined. 


1984 '85 '86 '87 '88 '89 '90 '91 '92 '93 '94 '95 


START PROJECT 

PRELIMINARY GO-AHEAD 


ENGINE FIRST FAA 

OELIV. FLIGHT CERTIFICATION 



TECHNOLOGY 

VALIDATION 


Figure 1. - Development schedule 



ABBREVIATIONS AND ACRONYMS 


V f 


ITS*' 


x-J- 


AAES 

ac 

ACARS 

ACB 

ACES 

ACM 

ACL 

Act 

A/D 

AEECS 

ADEMS 

Adv 

AEDS 

AFCM 

AFMS 

AFWAL 

AGB 

AGD 

AH 

AIDS 

A1PS 

AIRLAB 

ALMS 

APGS 

A/P 


advanced aircraft electric system 
alternating current 

AR1NC communications, addressing, and reporting system 

alternating current bus 

automatic controlled electric system 

air cycle machinery 

active control system 

actuator 

analogue to digital 

all electric environmental control Bystem 
advanced display and electrical management system 
advanced 

advanced electric distribution system 

advanced flight control manager 

automatic flight management system 

Air Force Wright Aeronautical Laboratories 

accessory gear box 

axial gear differential 

ampere-hour 

aircraft integrated data system 
advanced information processing system 
Avionics Integration Research Laboratory 
automatic load management system, electrical 
advanced power generation system 
autopilot 
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APU 

APDC 

ARINC 

ASSET 

A/T 

ATA 

ATM 

BC 

BCAS 

BIT 

BITE 

BP 

BPCU 

BPV 

BT 

BTC 

C 

CARSRA 

CB 

CC 

CDU 

cfm 

c.g* 

CITS 

COMP 

COND 


auxiliary power unit 
APU contactor 

Aeronautical Radio Incorporated 

advanced systems synthesis and evaluation technique 
autothrottle 

Air Transport Association 
air turbine motor 
bus controller 

beacon collision avoidance system 
built-in test 
built-in test equipment 
bus power 

bus control power unit 
bypass valve 
bus t ie 

bus tie contactor 
contactor 

computer-aided redundant system reliability analysis 

circuit breaker 

cabin compressor 

control and display unit 

cubic feet per minute 

center of gravity 

centr tl Integrated test systems 

compressor 

condenser 



CRAD 

contractor research and development 

CRT 

cathode ray tube, central gun type 

csd 

constant speed drive 

CSDL 

Charles Stark Draper Laboratory 

CT 

current transformer 

CTD 

control technology demonstrator 

CTFE 

chlorotrifluouroethylene 

CV 

check valve 

CVCF 

constant voltage constant frequency 

D/A 

digital to analogue 

DADS 

digital air data systems 

DAIS 

digital avionics information system 

DEMUX 

demultiplexer 

dc 

direct current 

DFCS 

digital flight control system 

DUS 

data handling system 

DITS 

digital information transfer system 

DLC 

direct lift control 

DME 

distance measuring equipment 

DoD 

Department of Defense 

DOC 

Direct Operating Cost 

DPCT 

differential protection current transformer 

DP/LM 

digital power/load management 

EAROM 

electrically alterable read only memory 

ECS 

environmental control system 

ED 

engine driven 
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EH 

E1DS 

EM 

EMA 

EMAS 

EMI 

EMP 

EMS 

EMUX 

EPC 

E/PROM 

EPS 

EPU 

ESS 

E 3 

FAA 

FAA AC 

FACS 

FADEC 

FAR 

FBW 

FC 

FC 

FCC 

FCC 

FCCS 


elec tro-hydraul ic 

elec tro- impul se deicing system 

electric motor or electromechanical 

elec tromechanical ac tua tor 

electromechanical actuator system 

elec tromagnet ic intef erence 

empennage 

electric management system 
electrical multiplexing 
external power contactor 
erasable/programmable read only memory 
emergency power supply 
emergency power unit 
essent ial 

energy efficient engine 
Federal Aviation Administration 

Federal Aviation Administration Advisory Circular 

flight augmentation computer system 

full authority digital engine control 

Federal Air Regulation 

fly by wire 

flight computer 

freon compressor 

flat conductor cable 

flight control computer 

flight control computer system 
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FCS 

FD1R 

FDM 

FET 

FIP 

FMCS 

FHS 

f pm 

FS 

FS 

FSSB 

FTC 

FTMP 

FTP 

FW 

FWC 

GATT 

G/A 

GEN 

GC 

GCU 

GPFC 

GTO 

HF 

HHA 

HOL 


flight control system 

fault detection, isolation, and recovery 

frequency division multiplexing 

field effect transistor 

fault indicator panel 

flight management computer system 

flight management system 

feet per minute 

flight static 

flight station loads 

flight station section breaker 

fault-tolerant computer 

fault tolerant multiprocessor 

fault tolerant processor 

full wave 

flight warning computer 

gate assisted turn-off thyristor 

go-around 

generator 

generator contactor 
generator control unit 
general purpose flight computer 
gate turn off 
high frequency 
hydromechanical actuator 
higher order language 
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HP 

HP 

HPX 

HTR 

HX 

UP 

IDEA 

IDG 

1DGS 

IEG/S 

IGV 

I LRU 

ILS 

INS 

INV 

IOC 

I/O 

IOC 

IRAD 

IRS 

ISEM 

ITS 

kipc 

kvar 

kU 

L/D 


high pressure 
horsepower 

horsepower extraction 

heater (electric) 

heat exchanger 

integrated actuator package 

integrated dlgltal/electric aircraft 

integrated drive generator 

integrated drive generator system 

integrated engine generator/starter 

inlet guide vanes 

independent line replaceable unit 

instrument landing system 

inertial navigation system 

inverter, electrical 

indirect operating cost 

input/output 

Initial operational capability or indirect operating cost 

independent research and development 

inertial reference system 

Improved standard electric module 

information transfer system 

thousand instructions per second 

kllovar 

kilowatt 

lift to drag ratio, aerodynamic 
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lb 

pound 

LCC 

life cycle costs 

LE 

leading edge f aerodynamic 

LED 

light emitting diode 

LaRC 

Langley Research Center (NASA) 

LeRC 

Levis Research Center (NASA) 

LFC 

laminar flow control 

LMC 

local management centers 

LMLA 

load management logic assembly 

LRU 

line replaceable unit 

LRU 

line replaceable unit, avionics 

LSI 

large scale integration, electronics 

LVDT 

linear variable displacement transformer 

LVT 

linear voltage transducer 

LW 

left wing 

LWEL 

left wing essential lords 

LWL 

left wing loads 

LWSB 

left wing section breaker 

MAB 

mid avionics bay 

MAC 

mean aerodynamic chord 

Mach 

speed of sound 

MALMS 

manned /automatic load management system 

MBPS 

megabits per second 

MCU 

master control unit 

MDM 

multiplex demultiplex (avOnics unit) 

.tor 

multiplexer data terminal 
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multi-microprocessor flight control system 
main electric load center 


M~ FCS 

MELC 

MINCOMS 

MLG 

MPa 

MTBF 

MTTR 

MUX 

NADC 

NASA 

NAVA1R 

NON ESS 

n.mi. 

NRC 

OAT 

OEW 

OF/UF 

OV/UV 

Omega 

PACS 

PBW 

PC 

PC 

PCP 

PDR 

PDU 


multiple interior communications system 

main landing gear 

mega pascals, hydraulic pressure 

mean time between failures 

mean time to repair 

multiplex 

Naval Air Development Command 

National Aeronautics and Space Administration 

Naval Air Systems 

non essential 

nautical miles 

non-recurring cost 

outside air temperature 

operating empty weight 

over frequency/ under frequency 

overvoltage/undervoltage 

a hyperbolic navigation system 

pitch active control system 

power by wire 

power contactor 

power controller 

pilot control panel 

phase delay rectifier 

power drive unit 



PH 

permanent magnet 

PMS 

performance management system 

POR 

point of regulation 

ppm 

pounds per minute 

PRI 

primary 

psf 

pounds per square foot 

PPS 

pounds per second 

PRV 

pressure regulating valve 

psl 

pounds per square inch 

PSP 

power system processor 

pro 

power take-off 

PTU 

power transfer unit 

PU 

per unit 

PWM 

pulse width modulation 

PWAH 

pulse width amplitude modulation 

PWT 

programmable wiring terminal 

QAD 

quick attach/ detach (device) 

RA 

radio altimiter 

RAM 

random access memory 

RAT 

ram air turbine 

RC 

recurring cost 

RCCB 

remote controlled circuit breaker 

RCF 

recirculation fan 

R&D 

research and development 

R1T 

remote input terminal 

RF 

radio frequency 
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RFI 

RLC 

RLG 

KOI 

ROT 

RPC 

RSS 

RT 

R&T 

RIGA 

RTU 

RVDT 

RW 

RWEL 

RWL 

SAE 

SAS 

SCMP 

SCR 

SEC 

SEM 

SFC 

SIFT 

SruCo 

SOC 

SOSTEL 


radio frequency interference 
remote load center 
ring loser gyro 
return on investment 
remote output terminal 
remote power controller 

relaxed static stability or root sum square 
remote terminal 
research and technology 

raaio technical commission for aeronautics 
remote terminal unit 

rotary variable displacement transformer 
right wing 

right wing essential loads 

right wing loads 

Society of Automotive Engineers 

stability augmentation system 

self-checking multiprocessor pairs 

silicon controlled rectifier 

secondary 

standard electronic module 

specific fuel consumption 

software implemented fault tolerance 

samarium cobalt 

spray oil cooled 

solid state electric logic 


15 


- «? 



SPS 

seco idary power system 

SPST 

single pole single throw 

SS 

signal source 

SSPC 

solid state power controllers 

TBO 

time before overhaul 

TDM 

time division multiplexing 

t/c 

thickness/chord ratio 

TL 

tail loads 

T/R 

transmitter and receiver 

TRU 

transformer rectifier unit 

TSB 

tail section breaker 

TSM 

two speed motor 

UART 

universal asynchronous rece iver/ transm it ter 

VHF 

very high frequency (radio set) 

VHS1C 

very high speed integrated circuits 

VLSI 

very large scale integration 

VMOS 

vertical metallic oxide semiconauc tor 

VOR 

VHF omni range, navigation 

VOR 

visual omni range 

VSCF 

variable speed constant frequency 

VSD 

vertical situation display 

VVVF 

variable voltage variable frequency 

WRP 

wing reference plane 

4-D Nav 

four dimensional navigation (3-D plus time) 

Z1F 

zero insertion force 
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1. GROUND RULES 


1*1 Aircraft Design 

Each aircraft is designed so that it would be expected to meet the 
requirements of FAR Part 25 and Part 36. 


1.2 Design Requirements 

Each configuration is sized based on achieving the design range with 100 
percent load factor. Minimum DOC configurations are derived at tne average 
stage length with 65 percent load factor. 

1.2.1 Performance. - 


• Cruise Mach No* 

• Still air design range on standard day 

• Average stage length 
1.2.2 Payload . - 

• 350 passengers @ 165 lb/ passenger 

• Baggage 

• Total payload 

• Space-limit cargo 

(not included in performance 
calculat ions) 


= 0.8 


= 4600 n.mi. 
= 2500 n.mi. 


= 57,750 lb 

- 3 5,750 lb 

- 73,500 lb 
= 31,600 lb 


1.3 Performance Constraints 


The following performance constraints are used: 

• Takeoff field length * 10,500 ft (? S.L., 84°F 

• Engine out second segment gradient 58 2.7% 


• Initial cruise altitude 


• Landing field length 

• Approach Speed 


s 31,000 ft with climb 
capability ot 3 ft/sec 
and 1 .3g buffet 

* 7,000 ft & S.L., 84 °F 
(L.W. * 302,000 lb) 

« 145 kt 


- * - 
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180 ft/min 


• Required rate of climb at start of 
cruise, max* climb power 

• Ratio of available wing fuel volume = 1*1 

to required fuel volume 


1.4 Cost Assumptions 

Direct operating costs (DOC) are calculated using the Air Transportation 
Association "Standard Method of Estimating Comparative Direct Operating Costs 
of Turbine Powered Transport Airplanes" with cost coefficients updated to 
1983 . All costs are based on constant 1983 dollars and a depreciation period 
of 16 years. Other assumptions associated with the calculation of DOC and 
return on investment (R01) are shown in table 1. 


1.3 Study Limitation 

Some of the most significant limitations of this study are common to any 
study which attempts to forecast trends. For the most part the levels of 

TABLE 1. FINANCIAL ASSUMPTIONS 


Parameter 

Value 

Fuel Cost 

$1. 50/Gal 

Depreciation Period 

16 years 

Salvage Value 

10% 

Maintenance Burden 

3.4 

Maintenance Labor Rate 

516.50/hour 

(Total) /(Revenue) Flying Hours 

1.004 

Percent First Class 

10% 

1 

Load Factor 

65% 

Manufacturers Profit Level 

15% 

Number of Aircraft - Development 

5 

- Production 

295 

Airline Fleet Size 

23 




technology assumed for advanced configurations are based on extrapolation of 
trends of technology advancements up to the present time, modified where nec- 
essary by judgments of specialists in each technological area. These predic- 
tions cannot account for fundamental breakthroughs which may (remotely) occur 
between now and technology readiness in 1990; however, it is rather unlikely 
that any major breakthrough could reach technology readiness by 1990. On the 
pessimistic side, these predictions cannot completely account for roadblocks 
in technology development. It is the purpose of risk assessment to make 
judgments about the probability and severity of roadblocks which may occur. 

In assessing the benefits of these advances in technology by applying them 
to the reference aircraft, there are several cases where compromises in air- 
craft design must be made to implement these advances, and these compromises 
may involve many fundamental aspects of the design. Time and cost limitations 
preclude detailed trade-offs to find the best compromise, so that the net 
result is a configuration which is not completely optimizea. The level of 
optimization reached is probably within about one or two percent of a 
perfectly optimized design, but we are looking for differences from the ref- 
erence aircraft of the order of 5-10 percent by applying advanced technology 
elements, so that the one percent lost through failing to optimize the design 
may be significant. 

In addition, aircraft design is a convergent iterative process. Prelim- 
inary estimates of, for example, c.g. range as a percentage of MAC, have 
proven to be slightly in error when the aircraft is resized. These errors do 
not significantly affect the quantification of benefits. 


2. BASELINE AIRCRAFT 


2.1 Origin of Configuration Design 

The baseline configuration is a three-engined, wide-body commercial air- 
craft using the same engine layout as the Lockheed L— 1 Oil TriStar. It also 
uses the same cockpit layout and fuselage diameter. Fuselage length is 
increased by 280 in as compared with the L— 1 Oil. In addition, the Baseline 

includes a high aspect ratio wing with supercritical airfoil section, E 
propulsion system, and graphite/epoxy composite materials. 

Aircraft flight control and secondary power systems represent current 
technology, i.e., the level of technology as on the Boeing 757 and 767. 


2.2 Power Generation System 

In line with the philosophy of utilizing conventional systems in the 
baseline airplane, electric power in this airplane is derived from a 
constant-voltage constant-frequency (CV/CF) system using advanced configura- 
tion hydromechanical constant speed drives. These drives known as the 
Integrated Drive Generator System (1DGS) provide constant speed operation for 
the Integrated generators and they offer attractive improvements over the 
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early axial gear differential (AGD) and the more recent integrated drive 
generator (IDG) configurations. The 1DGS is more modular in design concept, 
and utilizes a side-by-side configuration (in which the generator is on a 
parallel axis with the hydromechanical log elements), and it has an improved 
hydraulic system. Physically, unlike the in-line design of the IDG, the 1DGS 
is shorter in length and is a more compact, wider configuration that has a 
lower overhung moment on the engine pad. The modularity of the design also 
allows for more ready access to the power elements and, as a consequence, a 
reduction in mean-t ime-to-repair (MTTR) . These physical design attributes 
along with the utilization of an advanced state-of-the-art microprocesser 
power management system make the 1DGS an ideal candidate for the baseline 
airplane. 

The elements of one 1DGS power channel are shown in figure 2 to consist of 
a generator control unit (GCU), bus power control unit (BPCU) differential 
current transformers (CTs) and a quick attach/ detach (QAD) (1DGS mount) 
adapter. The GCU is a primary component in that it controls and monitors the 
operational status of the drive-generator combination, the qurlity of the 
electric power and any exceedances from normal system limits (power character- 
istics, oil temperatures, etc.). As important protection features, the GCU 
provides overvoltage/undervoltage, overfrequency/ underf requency , differential 
fault, open phase, and overload protection and it also detects the presence of 
component faults, within the IDGS, such as shorted diodes/PMG failures, etc. 
These latter protective monitoring functions are provided by built-in _est 



INTEGRATED DRIVE 
GENERATOR 



CURRENT 

TRANSFORMER 

ASSEMBLY 


AUXILIARY 

GENERATOR 


BUS POWER 
CONTROL UNIT 


QUICK AiTACH DETACH 
ADAPTER KIT 


Figure 2. - IDGS power channel/APU generator (Courtesy Sundstrand Aviation) 
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equipment (BITE) which is integral with the GCU. Other refinements of the 
IDGS , as with the earlier IDG system, involve the use of line-current trans- 
tormers (and other electric logic) to provide kilowatt (kW) and kilovar (kvar) 
load sharing, when the generator outputs are electrically paralleled. The GCU 
works closely with the BPCU and, through an intracomraunication between these 
assemblies, the complete power system is controlled via the generator bus 
contactors (GBCs) and the bus tie contactors (BTCs). 

Figure 3 is a schematic of the electric power system in the baseline air- 
plane: it is designed as a three -channel paralleled system that can be oper- 

ated as a paralleled or nonparalleled electric system. Each IGDS Is rated as 
90/120 kVA unit and the three generators are integrated *.ith an onboard APU 
driven generator (of the same rating), and a ram air turbine (RAT) driven 
5 kVA generator (the RAT also drives an emergency hydraulic pump unit). The 
design layout of the power system Is different from the L-101 1-500 configura- 
tion in that the use of the "go-around" emergency electric power system has 
been eliminated. In lieu of the latter, electric digital logic is used to 
drop nonessentiai electric loads off each of the three primary ac buses, 
leaving (in this emergency) only flight critical and other important loads 
(i.e. t communications, etc.) connected to the buses. This emergency power 
configuration is considered an improvement over the M go-around" system in that 
H avoids the hazard of bringing power cables from each of the three genera- 
tors into one area: it also acknowledges the remote possibility that bus 
faults can occur and it avoids the prospect of a sequential (cascade) failure 
of generators since essential/emergency loads are sourced by multiple buses 
rather than one. 

As previously stated, the raicroprocessers in each power channel operate 
continuously to control and monitor the status of each power channel, but 
total power system management can be effected via the BPCUs. The BPCU is the 
master logic control (or co-ordination center) for the APGS (advanced power 
generation system) and as such it ‘‘manages*’ the power system, handles the 
communication with the GCUs , outputs BITE displays, and interrogates the 
non-volatile memories. Typically, the core of each GCU is a microprocessor, 
such as the Intel 8085, which operates with a 5 MHz clock: peripheral ports 
provide the interfaces between themicroprocessors and the logic circuit in the 
GCUs. The system also includes erasable/programmable read only memory 
(E/PROM), which provides the step-by-step instructions to the microprocessor; 
a nonvolatile memory (NVM), to store data in memory, without loss during 
power-OFF conditions and, an electrically-erasable read only memory (EAR0M) to 
transmit data to the BPCU for display; also a random access memory (RAM), to 
handle port addresses, timer values, and sensor readouts. Other interfaces 
with the microprocesser control system includes A/D and D/A converters that 
communicates with the microprocessor via peripheral ports, as shown in fig- 
ure 4. A universal asynchronous receiver/transmitter (DART) completes the 
system and this converts 8-bit serial data from the BPCU into parallel format 
for the microprocessor. Conversely, communication from the P to the BPCU 
involves paral lel-to-serial conversion. 

2.2.1 Emergency// P U ac power sy stem. - Figure 5 is a simplified schematic of 
the low voltage 28 Vdc system which is powered from the primary ac power 
system. Three 28 V 200 A transformer rectifier units (TRUs) comprise the 




Figure 3. - Baseline electric power system. 











Figure 4. - Microprocessor ControJ System (Courtesy Sundstrand Aviation;. 


power supply for the aircraft's 28 Vdc loads: these are advanced state-of- 

the-art rectifier units which are self-cooled. A typical coni igurat ion of an 
emergency dc power system is as shown in figure 5A, in which the 28 Vdc emer- 
gency loads are shown connected to the emergency bus. The problem with this 
configuration is that a fault, on the emergency bus itself, could result in 
the loss of all essential and emergency dc loads. Figure 5b is therefore a 
preferred approach, since it allows the essential and emergency dc loads to be 
powered by multiple buses. As shown in the latter approach, the emergency 
battery is separately diode fed into the main and essential dc buses, with 
essential/emergency loads being connected to the two main dc buses. It would 
( >e possible also to use three dc buses (as with the ac system) and to use a 
tri-diode feed from the battery. 


The baseline airplane does not f pose the same critical concern on the ac 
power system as the IDEA since the flight surface controls are actuated 
hydraulically. As a consequence, the RAT drives an emergency pump unit which, 
in the event of an all engine-out condition, powers selected hydraulic jacks 
in each of the aircraft three primary control axis. This modus operand! is 
possible since, as described in Section 2.5, the inboard/outboard ailerons, 
the rudder and horizontal stabilizer ail have redundant actuators that are 
mechanically summed onto each control surface. Isolation of some of the 
actuators is necessary to reduce the quiescent flow deraana and to avoid 
overloading of the pump unit. 









Because the baseline airplane uses a hydro-mechanical flight control 
system, the emergency electric power system is required only to support 
important instrumentation, engine/fuel controls and other miscellaneous 
electric and avionic functions. Fuel/oil shut-off valves, transfer valves, 
inlet doors, emergency lighting and certain displays/ read-out s utilize 28 Vdc 
power, while synchros, motor driven fans, etc., utilize ac f >wer from t\e RAl 
generator. Examination of figure 3 shows thav the 28 V essential dc *"us can 
be fed from the RAT generator via the No. 3 TRU. Under this mode of operation 
the bus tie contactor (ETC) wilJ be open and nonessential loads on the main ac 
bus will be isolated. 

The Baseline electrical power requirement is shown in Figure 6. 


2.3 Hydraulic System 

Supply pressures of 3000, 5000 and 8000 psi were considered ior the 
baseline airplane. For high performance military aircraft, 5000 and 8000 psi 
systems have been espoused as offering prospectively lower weight, although 
this benefit is offset by higher acquisition costs and higher maintenance 
support costs, as reflected by a prospectively lower MTBF, lower reliability 
and increased leakage problems. 

Rockwel 1-Col umbus has been evaluating an 8000 psi lightweight hydraulic 
system for NADC and the SAE A-6 Subcommittee is constantly reviewir* the 
progress on the 8000 psi system. Grumman Alrcrai; has also conducted a life 
cycle cost study on the F-l 4 showing a potential $297K/a ircraf t saving over 
the life of the aircraft. In addition A REX and Vickers have been developing, 
testing and evaluating pumps for the 8000 p ,i system, using non-flammable 
fluids such as the A-02 . Some early problems were identified with the pumps, 
but the hydraulic system suppliers are not identifying any uns uncountable 
problems . 

As regards the installation aspects, components such as seals in actuators 
(and, particularly, Hgh temperature/high pressure dynamic seals) are a sub- 
ject for consideration and some concern: further, the concern foi the reli- 

ability of production in-line joints and leakage leads to the adoption of the 
most scrupulous quality control methods for trie welded and non-welded in-line 
joints. The higher specific weight of the fire-resistant fluids, such as the 
A-02 (chlototr if luoroe t hylene ( CTFE) ) , is an incentive to explore the higher 
pressure systems, but the efficacy oi this high pressure system for the 
commercial airplane is debatable (particularly with the emphasis on DOCs). 

The normal hydraulic specifications have also r-laxeo (tor the 8000 psi 
hydraulic system), the normal burst pressure limits of 3 to 5 times working 
pressures. Fluid velocities (depending on the line size) will also be higher; 
typically these will increase from the 15 to 30 f ps to as high as 60 to 80 
fps. In addition there are some practical performance considerations such as 
reduced bulk modulus and reduced stiffness oi actuators in reacting high hinge 
moment loads. Finally there is the question as to the real weight savings in 
any aircraft where the ratio of small hydraulic actuators to large hydraulic 
actuators is large. It can be projected that tne best weight benefits would 
spring (as with the high voltage electric system) from the transmission cf 








high power over long distances. However, aside from landing gear and other 
large loads, etc., most actuators in the hydraulic system tend to be small (in 
their horsepower demand) and so line weight would not be reduced much with a 
higher pressure system. Another factor is that there is an unfavorable 
increase in the ratio of the tube wall thickness to the tube diameter in the 
low line sizes. A similar rationale applies to the actuator housings. 

Based on the foregoing discussion, a conventional 3000 psi hydraulic 
system was selected for the Baseline airplane. This system comprises a total 
of four ED pumps: two on the No. 2 AGB and one on each of the Nos. 1 and 3 

(engine) AGBs. Supporting the four ED pumps (to give additional flow 
capacity at takeoff and to furnish a high degree of redundancy/ rel iabil ity are 
two ATM (air turbine motor) driven pumps and two electric (ac) motor driven 
pumps. To meet the all-engine-out condition and to provide emergency power 
for the FCS, a ram air turbine (RAT) driven pump is used to power selected 
critical FCS actuators. 

Figure 7 is a simplified schematic of the hydraulic system: it is con- 
figured as a quad redundant system but this level of redundancy is not 
provided to all the aircraft loads. For example, the redundancy level of the 
hydraulic system behind the FCS actuators is as below. 


— . — ■ — — — — 

Control Surface 

Redundancy Level 

Hor izontaJ Stabil izer 

4 

Inboard Ailerons 

3 

Outboard Ailerons 

2 

i 

Rudder 

3 

Spoilers i 

1 


As shown in the hydraulic schematic, figure 6, the four systems A, B, C, D 
are individually supplied by the four ED pump units; however, two power trans- 
fer units (PTUs) interconnect systems A & B and C & D, without any interchange 
of fluid. The PTUs are back-to-back pumping elements that are reversible to 
the extent that one element can act as a motor, while the other acts as a 
pump. If, for example, there is a loss of pressure in system A (due to a No. 

1 engine failure), pump B on No. 2 engine will operate the left side element 
of the PTU as a motor, and the RH side will operate as a pump to re-establish 
pressure in the A system. In addition to the PTUs, an ATM pump unit and an ac 
motor pump unit u as back-ups to each of systems B & C. Finally, the RAT 
pump unit ties into system D lo meet the extreme emergency of the all-engine- 
out condition. 

From the foregoing description, it can seem that the hydraulic system in 
the baseline airplane is configured as a highly-rel iable/highly-redundant 
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Figure 7. - Baseline hydraulic system schematic. 
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fluid power system, which furnishes not only quad redundant power channels to 
;* the FCS, but also has the back-up support of eight pumping elements and two 

> PTUs. This is the criterion and standard of reliability that must be matched 

by the electromechanical system, EMAS, for the FCS in the IDEA* 

- From a power standpoint, the four ED pumps and the two AT^ pumps are 

Vickers PV3-240-2 variable displacement units having a 2.4 in /rev displace- 
f ment each. These pumps deliver approximately 38.8 gpm @ 3880 rpu, so each 

I pump can be rated approximately at 60 hp. The two acynotor pump units are 

| Vickers MTEV3-022-14 having a displacement of 0.22 in /rev, having a 10.5 gpm 

. flow capability: the liquid cooled motor, in this unit, is rated at approx- 

imately 15.5 hp. Total hydraulic flow demands in the baseline airplane vary 
^ significantly, with the system installed capacity being sized by the take-off 

condition. Figure 8 is a bar chart showing flow condition for each of the 
systems. Two priority valves are connected into the system downstream of the 
power take-offs for the FCS, these priority valves isolate all non-essential 
hydraulic services in emergency conditions. 



2.4 ECS 

The environmental control system in the baseline airplane follows the 
design configuration of the system in the Lockheed L-1011-500 aircraft. Basi- 
cally, the system is powered by engine bleed air that is tapped from the 



i 

Figure 8. - Hydraulics peak horsepower/system vs. mission segment. 1 
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intermediate and high stage bleed of the engine compressors. For reasons of 
fuel economy, a 50 percent recirculation system is proposed in which 50 per- 
cent fresh air is derived by the compressors and 50 percent is fan- 
recirculated, through filters, from the cabin. The system is designed to 
provide the following: 

a. Cabin pressurization up to 40,000 ft. 

b. Heating 

c . Cool ing 

d. Humidification 

The pressurization requirement is met by tapping the appropriate pressure 
stages of each engine compressor, with the equivalent of a fifth stage being 
used during engine cruise power settings. For low engine power settings 
and/or r lie need to supply adequate pressure to operate the cooling turbo- 
machinery during, say, idle descent let-down the high stage bleed would be 
used. Flow valves regulate the air mass flow from each engine in accordance 
with the cabin pressure vs. altitude schedule shown in figure 9. 

Heating in the baseline is derived from the high temperature bleed air 
from the engines. Typically, this high temperature bleed air is used for the 



Figure 9. - Cabin pressure schedule. 


30 




air conditioning and the ice protection system for the wings and engine: It 

is also used for power* ig the ATM driven hydraulic pumps described above. As 
a consequence, the bleed capacity for high temperature and high pressure air 
is dictated more oy these auxiliary functions, rather than by the ECS, which 
represents the main bleed power demand on the engines during cruise flight. 
Therefore, considerable cooling of this air is required, prior to its delivery 
to the cabin and this is accomplished by: (1) a precooler installation in 

each power plant; (2) ram air cooled primary and secondary heat exchangers; 
and (3) air cycle machinery (ACM). Normally, adequate cooling of the bleed 
air in high altitude cruise flight can be effected with the ram air heat 
exchangers, permitting the ACM to be bypassed (so as to extend its operational 
life). 

Cooling, as stated above, is accomplished with three types of equipment: 
a precooler installation in each power plant, primary/secondary (ram air) heat 
exchangers and expansion cooling machinery. The primary cooling demand 
appears on the ground with a fully loaded airplane and high outside air tem- 
peratures: the burden is also exacerbated by conditions of high humidity. On 

such days, ground cooling is accomplished with outside conditioned air, or by 
high-pressure air derived from the APU or any engines (that are running) on 
the ground. With engines running, air is first cooled to about 500°F by the 
precooler, which uses bypass fan air as the heat sink; after this, the air is 
passed through a primary heat exchanger, Hx, and then to the ACM (see 
figure 10). After compression, the high pressure/high temperature air is 
again cooled, this time by a secondary Hx, which pulls down the temperature of 
the air before it is delivered to the expansion cooling turbine. Without 
external air, or engines running on the ground, the APU will power the ECS via 
an APU driven load-compressor. With a fully-loaded cabin (350 passengers) on 
a 103°F day, the cooling system can bring cabin temperature down from L13°F to 
75°F in about 30 minutes. Conversely, under cold day operation, with an 
outside air temperature of -50°F, and a minimal metabolic load, the ECS can 
maintain the cabin temperature above 70°F. 

The baseline ECS bleed schedule is shown in figure 11. 


2.5 Flight Controls 

The baseline flight control system consists of the primary and secondary 
flight controls, including stability augmentation, autopilot, and spoilers. 

The baseline system is similar to the existing L-1011 system but includes 
active ailerons for gust alleviation, maneuver load control, and elastic mode 
suppression. The baseline system uses mechanical cable control of servo 
valves which control full power hydraulic actuators moving the aerodynamic 
surfaces. 

Autopilot and stability augmentation inputs are applied in parallel with 
the column inputs in the pitch axis and dual mode servo valves in the roil and 
yaw axis. 

Figure 12 is a simplified block diagram showing the electronic flight 
control system. The automatic flight control computer is digital and 
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Figure 12 . - Baseline digital flight control. 


quadruply redundant for the Autoland function. The primary flight control 
computer is mainly analog and contains stability augmentation circuits, stall 
warning, altitude alert, system monitor, direct lift control, automatic ground 
speed brake, and fault isolation monitor. The trim computer provides dual 
segregated subsystems for manual and automatic pitch trim, Mach trim, and Mach 
feel. The interconnections to sensors, servos, and instruments are analog; 
the interconnection with the navigation computer is digital. The significant 
features of the flight control electronic system are: 

# Roll and pitch attitude hold with control wheel steering 
0 Heading select and hold 

0 Altitude select and hold 
0 Vertical speed select and hold 
0 Indicated airspeed and Mach hold 

• Auto control from VOR and area navigation 
0 Speed control and auto throttle 

0 Active symmetric aileron control for maneuver load alleviation and gust 
alleviat ion 
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• Cat 111 1LS and autothrottle 

• Takeoff and go-around guidance 

• Yaw and nose wheel steering for rollout 

• Lift compensation during turns 

• Failure protection and warning 

• Auto fault isolation 

2.5.1 Pitch control « - The horizontal stabilizer rotates for pitch control 
and trim input (figure 13). The elevator portion is geared to the stabilizer 
through a nonlinear mechanical drive train for added control effectiveness. 
Four parallel hydraulic actuators operate in unison to drive the stabilizer. 
The actuators are controlled oy four servo valves each supplied by one of four 
hydraulic systems. The valves are combined in assemblies of two. Each 
assembly has one mechanical input liukage and two feedback linkages, one for 
each valve. The input is mechanically connected to the feedback linkages to 
close the servo loop. The primary control path is entirely mechanical up to 
the servo valves; however, this control is modified with powered, limited 
authority, inputs from the autopilot, trim system, and feel system. The 
mechanical cable/push rod systems are dual, one for the pilot and one for the 
first officer (copilot). They are coupled so that both work in unison under 
normal conditions. The forward coupler can be disconnected manually by the 
pilot or firs* officer. The aft coupler located as a part of the stabilizer 
servo system, is electrically disconnected only when both servos on one side 
are de-energized. Decoupling, either aft or forward, is required only in case 
of a system jam. 

As the stabilizer leading edge moves from one degree up to 14 degrees 
down, the geared elevator moves in the same direction as the stabilizer from 
zero (faired) to 28 degrees trailing edge up. 

• Pitch Feel and Trim System: The trim motor, operated by a manual 

switch on the control column, is primarily a combined series/ parallel 
trim to decrease column excursion required for trimming. The pilot's 
feel force is the product of control column displacement from trim and 
the feel spring constant. The trim motor is also controlled auto- 
matically by the autopilot when engaged, and by the Mach number to 
compensate for movement of aerodynamic center of pressure. 

The pilot may override the output of the trim motor with a manual trim 
wheel through cable, gears, and a ball clutch. The feel force is a 
maximum of 85 pounds at the column and can be overriden by the pilot. 

No matter where the trim is set, the pilot can obtain full excursions 
of the stabilizer with reasonable column forces. 

• Pitch Monitoring System: A monitoring system detects jams and open 

links in the mechanical system. The sensing system consists of bungees 
(springs) in the cable systems and aft coupler that are instrumented to 


35 




Figure 13. - Baseline primary FCS: horizontal stabilizer. 



detect motion when the force exceeds bungee preloau force, and cable 
integrity sensors instrumented to detect loss of continuity. A logic 
network uses the signals to determine the location of the jam or open 
and the appropriate action required# Warning lights direct the pilot 
to remove hydraulic power from the appropriate servos and manually 
disconnect the forward coupler. The aft coupler open automatically 
when power is removed from the servo valves. Control is maintained by 
the redundant cable system and the remaining set of servos, however, 
the feel force is reduced to one-half of normal when the coupler is 
open. 

• Stall Warning System: An artificial stall warning is provided by means 

of two shakers which vibrate the pilots' control columns whenever the 
aircraft speed is less then 1.07 times the stall speed. The stall 
speed is computed using a combination of air data, angle of attack, 
slat, and flap posit ^ns. The system is inoperative when the landing 
gear struts are compressed (aircraft is on the ground). The system 
commands the spoilers to retract when a stall warning is indicated. 
Sensor and power faults are annunciated in the cockpit, and channel 
selection capability is provided. 

2 * 5*2 Roll control system . - Pilot control inputs are communicated mechani- 
cally from the control wheels to the servo valves at the ailerons (figure 14). 
Separate paths are provided from each control wheel to the inboard aileron on 
the corresponding side (left or right). In normal operation the control 
wheels are coupled and the left and right ailerons operate in unison asymmet- 
rically. If a jam occurs, the wheels can be manually decoupled. 

All four aileron surfaces deflect + 20 degrees. Aileron roll control is 
supplemented by spoilers during low speed (flaps extended) flight. Spoiler 
deflection is a nonlinear function of aileron deflection with 40 degrees of up 
spoiler corresponding to 20 degress of up aileron on the same wing. Simi- 
larly, 2.5, 12.5, and 17 degrees of aileron correspond to 0, 10, 20 degrees of 
spo Her , respect ively . 

• Aileron Servos: Three hydraulic actuators and three servo valves serve 

each inboard aileron; and two actuators and two servo valves serve each 
outboard aileron. Each actuator for a particular aileron is supplied 
by a separate hydraulic system. The servo valves for a particular 
aileron are assembled with a common input torque shaft. Two feedback 
rods are provided at each servo valve. Two input reds are provided at 
the inboard servo valves, one at the outboard. The dual input and 
feedback rods operate on opposite ends of the common input torque shaft 
for the servo valve assembly. In addition to mechanical commands, two 
of the three left inboard servo valves accept electrical commands from 
the autopilot. When on autopilot, the position of the left inboard 
aileron is fed mechanically to the other ailerons through the primary 
mechanical system . 

• Roll Feel and Trim: Artificial feel and centering for the roll control 

system is provided by a single compresrion spring cartridge in the left 
control path. The ground point of the feel spring is shifted by the 
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roll trim actuator, thereby providing parallel roll trim. Overtravel 
is provided so that full roll control is available irrespective of the 
trim actuator position. The trim system can provide up to + 7 degrees 
of aileron travel. Spoiler operation is affected by aileron trim in 
the same manner as by other aileron inputs. 

• Monitoring System: Two torque limiters and a cross-tie bungee are 

included to permit continued roll operation in the event of opens or 
jams in the mechanical control paths. The cross-tie bungee aces not 
have a deflection switch but it does permit relative motion between the 
two ailerons. The torque limiters each permit relative motion between 
control wheels and cable system and contain sensors to detect deflec- 
tion for use in the monitor display system. If a jam occurs downstream 
of the limiter in either control path, continued control is possible by 
overcoming the breakout force of th*- affected limiter and controlling 
through the other control patch. Operation of the torque limiters is 
displayed to the pilot for manual shutdown of the affected aileron and 
spoiler actuators. 

The modulating signal for direct lift comes froj the au* -trim transducer 
in the autopilot pitch servo. It does not depend upon selection or engagement 
of the autopilot and is essentially a stabil izer-out-of-t r ira signal. Altitude 
changes are ti us produced largely from operation of the DLC spoilers rather 
than the stabilizer, with much reduced pitch attitude excursions. 

Spooler automatic operation for landing, rejected takeoff, go-aiound, and 
incipient stall is determined by logic in the flight control electronic sys- 
tem. Inputs are from flap handle, throttle levers, thrust reverser levers, 
stabilizer control system, landing gear control handle and landing gear strut 
compression. During a normal landing, when landing gear is down, flaps are 
extended, and landing gear switches indicate aircraft touch-down, the computer 
asks for 12 degrees spoiler deflection after a half-second delay, then when 
struts are fully compressed, spoilers extend to 60 degrees. Limiting ruoder 
deflections is accomplished by dual positive mechanical stops operated by 
solenoid operate^ hydraulic actuators. There are four rudder actuators 
arranged in two dual tandem sets. Three servo valves are provided assembled 
side by side with separate input push rods to each side of the common input 
shaft. Each servo valve has input from a separate hydraulic system (A, E, and 
C) . One valve serves two actuators. Two of the valves have electrical inputs 
in addition to the mechanical input. The electrical input is used for yaw 
stability augmentation. 

The rudder is controlled automatically for dutch roll damping and turn 
coordination during all phases of flight and for runway alignment and roll out 
during autoland. In the basic stability augmentation system (SAS), the con- 
trol is independent of autopilot status and allows pilot inputs to be added 
via the rudder pedals. SAS and turn coordination are achieved by processing 
inputs from the three rate gyros and tour aileron position transducers. For 
approach and land, the aileron signals are switched out. The runway alignment 
signal is a function of instrument landing system (1LS) error, heading error, 
altitude, and yaw rale. The alignment scheme is a limited forward slip 
maneuver in which up to eight degrees of initial crab angle is removed by 
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lowering a wing and slipping the aircraft. After touchdown, the autoland 
computation uses 1LS error and yaw rate to direct the aircraft down the runway 
with rudder control and limited nose wheel steering. 

2.5.3 Autopilot . - There are four channels in each axis for approach and 
landing, and there are only two which are active for cruise. The system has 
two dual computers, autopilot A and B which can be engaged independently or 
simultaneously, either in the autopilot mode (in approach/land only) or flight 
director mode. Thus, either or both flight directors may be used to provide 
flight director steering information to the pilot, with or without autopilot 
engagement. With autopilot engagement the flight director may be used to 
monitor autopilot operation. Each pitch system (A and B) has a servo with 
mechanical input into the mechanical control. The roll output (A and b) is 
electric** 1 ., direct to the aileron actuator servo valves of the left inboard 
aileron. In either case, the autopilot outputs operate in parallel with the 
control wheel inputs. The pilot can mechanically overpower the autopilot 
servos through the control wheel. 

The basic autopilot mode is parameter hold with the pilot able to input 
change through control wheel steering. The autopilot command mode provides 
automatic control in response to a computed guidance signal. 

An automatic trim system acts to center the autopilou servos co prevent 
transients when the autopilot is either manually or automatical!} disengaged. 
There are two automatic pitch trim systems and at least one must be operative 
to engage either autopilot. The altitude signal for altitude hold and alti- 
tude select is a rate-and-displacement-1 imited barometric altitude error 
signal which is gain scheduled as a function of true airspeed. An integration 
path is provided to compensate for long term error signals. The control sig- 
nal is mixed with pitch attitude and attitude rate signals for control loop 
damping. As the altitude approaches the selected altitude, the altitude rate 
and altitude error are used to compute the point at which the maneuver to 
capture the desired altitude is initiated. At initiation, an exponential 
flare maneuver to capture the desired altitude is commanded. When the man- 
euver is completed, the altitude hold mode is automatically established and 
annunc iated. 

Roll attitude/heading hold is the basic roll axis autopilot mode. Upon 
engagement, the autopilot will maintain heading if the bank angle is less than 
five degrees and will maintain bank angle if over five degrees. Control wheel 
steering can be used to establish a new roll attitude or heading reference. 

In wfie navigation mode, the autopilot will direct the aircraft to capture 
and follow a VOR beam or an Area Nav course, if these systems are operating. 

The approach/land mode will capture the localizer beam, follow the local- 
izer beam, capture the glideslope, follow the glideslope, align with runway at 
150 ft altitude, perform flare at 50 ft altitude, and maintain heading down 
the runway on rollout * 

The glideslope capture maneuver is inhibited until localizer track is 
established and glide Q lope deviation is less than 30 microamperes. The flare 
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gain is scneduled as a function of radio altitude, radio altitude rate and 
normal acceleration to essentially zero rate at zero altitude. 

The turbulence mode is normally engaged when the aircraft is flying in 
turbulence. The autopilot reverts to the parameter hold configuration with 
reduced gains to provide softer control. 

2.5.4 Stability and control . - The horizontal tail is sized by the require- 
ment for a total c.g. travel of 4.8 ft with 6 percent mean aerodynamic chord 
(MAC) static margin at the aft c.g. limit. This results in a horizontal tail 
volume coefficient of 1.08 and c.g. limits of 17 percent to 41 percent MAC 
(figure 15). 


2.6 Aerodynamics 

Airfoil characteristics are based on trends in improvements in airfoil 

* design (such as drag divergence Mach number). These characteristics are 

* incorporated into a parametric aerodynamic performance program which predicts 
drag polars for wings of different sweep* aspect ratio, thickness/chord ratio, 

J. etc. A description of this method may be found in reference 3. 

4 2.7 Propulsion 

4 3 

The General Electric Energy Efficient Engine (E ) was used for the base- 

line aircraft ana IDEA performance evaluation. The engine performance was 
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Figure 15. - Horizontal tail sizing. 
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estimated by GE for a fully developed propulsion system based on the results 
of the recently completed NASA funded E program- The engine technology 
required to provide the estimated performance would be available in the mid 
1990s - 

The engine gearbox for the aircraft accessories is core mounted and driven 
off the high pressure compressor shaft. For the baseline aircraft, the air- 
craft accessories Include generators, hydraulic pumps, engine starter, plus 
the engine required accessories (fuel and oil pumps). High pressure 
compressor bleed air is used for the environmental control system on the 
baseline aircraft. Power requirements are defined in Sections 2.2 through 
2.4. 

3 

The General Electric E engine/ nacelle configuration is illustrated in 
figure 16. This configuration uses a mixed flow exhaust system. The pro- 
pulsion system characteristics are given in table 2. The engine bypass ratio 
and overall pressure ratio are higher than current operational engines, 
however the turbine inlet temperature has not been significantly changed. 
Specific fuel consumption has been improved approximately 15 percent relative 
to current high bypass engines. 


2.8 Structures and Materials 

For each configuration aggressive use is made of graphite/epoxy composite 
materials. Advanced aluminum alloys are used where they are more effective 



Figure 16. 


- NASA/GE FPS-9 engine/nacelle. 
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TABLE 2 - BASELINE PROPULSION SYSTEM CHARACTERISTICS. 



Aluminum 

Titanium 

Steel 

Composite 

Other 

X Weight 
Reduction 

Wing 

0.11 

0.04 

0.05 

0.77 

0.03 

0.21 

Tail 

0.10 

0.10 

0.06 

0.59 

0.15 

0.21 

Fuselage 

0.44 

0.07 

l 

0.01 

■ 

0.40 

0.08 

0.11 

Landing Gear 

0.20 

0.00 

0.33 

0.00 

0.47 

0.05 

Nacelle 

0.11 

0.57 1 

0.13 1 

0.18 

0.01 

0.00 

Engine Section 

1.00 

0.00 

0.00 

0.00 

0.00 

0.02 

Air Induction 

0.73 

0.04 

0.00 ' 

0.23 

0.00 

0.09 


than composites. The distribution of material and percentage weight reduction 
(as compared with a conventional aluminum structure) are shown in table 3. 


2.9 Baseline Optimization 

2.9.1 Sweep, aspect ratio, and thickness/chord ratio . - Wing sweep, aspect 
ratio and thickness/chord ratio are based on the advanced configuration 
described in reference 4, At the time the study described in reference 4 was 
performed fuel prices were rising in constant dollars, and it appeared that 
minimization of block fuel was of paramount concern in aircraft design. The 
wing was therefore designed to minimize block fuel (figure 17). Trends in 
fuel prices (in constant dollars) are now stable or declining, that wing 
design to minimize DOC is more appropriate. Because of the design constraint 
in fitting the landing gear, aspect ratio was limited to a maximum value of 
12. The resulting wing design is close to that for minimum DOC using the 
price ground rules of this study. This wing design is therefore considered 
suitable for the Baseline. 

2.9.2 Thrust /weight ratio and wing loading . - A carpet plot of thrust/weight 
ratio (T/W) and wing loading (W/S) is shown in figure 18. The constraint that 
the aircraft should have 180 ft/min rate of climb at the top of climb, using 
maximum climb power, requires that T/W have a value of about 0.23. The fuel 
volume constraint (which requires the wing fuel volume to be 10 percent 
greater than the mission requirements) constrains wing loading to be less than 
131 Ib/ft. These two constraints size the baseline aircraft. 


2.10 Configuration Description 

The following sections summarize some of the leading characteristics of 
the baseline configuration. A detailed description may be found in Appendix 
A. 
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TABLE 3« - MATERIAL DISTRIBUTION AND WEIGHT REDUCTION 


Wing 

Tail 

Fuselage 
Landing C 
Nacelle 


Aluminum 

Titanium 

Steel 

Composite 

Other 

% Weight 
Reduction 

| 0.11 

0.04 

0.05 

0.77 

0.03 

21 

0.10 

0.10 

0.06 

0.59 

0.15 

21 

0.44 

0.07 

0.01 

0.40 

0.08 

11 

0.20 

0.00 , i 

0.33 

0.00 

0.47 

05 

0.11 

0.57 

0.13 

0.18 

0.01 

00 

1.00 

0.00 

0.00 

0.00 

0.00 

02 

0.73 

0.04 

0.00 

0.23 

0.00 

03 


FIT LIMIT 


BLOCK FUEL 


ASPECT RATIO 


Figure 17. - Wing parameter optimization 

















Figure 18. - Direct operating cost at 2500 n.mi. 


2.10.1 Geometric description . - Table 4 summarizes leading geometric data. A 
three-view of the baseline configuration is shown in figure 19. 

2.10.2 Weights . - Baseline aircraft weights are summarized in table 5. 


3. ADVANCED POWER GENERATION SYSTEMS 

This section discusses the comparison of variable speed constant frequency 
(VSCF) , constant speed drives (CSDs) , variable voltage/ variable frequency 
(VV/VF) and high frequency power-generation systems. The guidelines that 
dictate this comparison are, to a major extent, related to their suitability 
to the IDEA and Alternate IDEA airplanes. 


3.1 Historical Background 

The aerospace electrical industry has pursued the development of power 
generation systems which would best meet the needs of the utilization equip- 
ment. Pre-World War 11, the elec tric/avionic power demands were met by 12 V, 
and later by 24 Vdc systems, since the ac power requirements at the time were 
only 500 to 1500 W. This power was used mainly for lighting, commi’nic at ion- 
radios, and minimal armament. Towards the end of World War 11, however, the 
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TABLE 4. - BASELINE CONFIGURATION GEOMETRY 


Wing 

Trapezoidal Area 

3590 ft 2 


Span 

207.5 ft 


Taper Ratio 

0.246 


Sweep at 1/4 chord 

25° 


MAC 

19.4 ft 

Horizontal Tail 

Trapezoidal Area 

955 ft 2 


Tail Vol . Coeff 

1.08 

Vertical Tail 

Trapezoidal Area 

567 ft 2 


Tail Vol Coeff 

0.059 

Fuselage 

Length 

201 ft 


Diameter 

19.6 ft 

TABLE 

5. - BASELINE AIRCRAFT 

WEIGHTS 


Weight, lb 

Weight Fraction, % 

Gross Weight 

470224 


Fuel Available 

142908 

30.39 

Zero Fuel Weight 

327316 


Payload 

73500 

15.63 

0EW 

353816 


Empty Weight 

233940 


Structure 

53785 

30.50 

Propulsion 

26004 

5.53 

Syst JB8 

64527 

13.72 


electric power demands had grown to the point that four 28 V 300 amp (9 kW) 
generators were required to support the electrical needs of the larger bomber 
aircraft and the emerging large commercial transports. The avionics ac load 
requirements in these aircraft were then met by inverters (consisting of dc 
motor-dr iven/ac generator sets) that ranged in size from 100 VA up to 2500 VA 
each. The specific weight of the earlier dc generators (and dc starter- 
generators) averaged 43 lb/kW, mainly because of the wider speed range of the 
piston engines and the lower base-speeds of the generators. 

In the early and late 1940s, the U.S. and British Advisory Staffs, recog- 
nizing the trend towards the much larger capacity power generation systems, 
advocated the use of primary ac generator systems with 6tatic rectifier units 
to furnish 28 Vdc power for the large amount of 28 Vdc utilization equipment. 
Nonetheless, the 28 Vdc power requirement was 'secondary' in relation to the 
projected capacity of the new ac (primary) power systems. In addition to the 
selection of a suitable higher transmission voltage for the ac generators, 
there were controversial discussions as to the choice of an optimum frequency 
for these new power systems. The industrial frequencies of 50 and 60 Hz were 
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recognized as being too low for the aerospace industry, so frequencies of 250, 
400, 600, 800 Hz (and higher) were evaluated. Finally, the 200 V/400 Hz power 
was selected as a standard, since it permitted ac motors to run up to speeds 
of 24,000 rpm and it offered attractive reductions in the electromagnet weight 
for motors, transformers, filters, etc. 

Figure 20 is a generalized plot of the motor s/electromagnet weight saving 
versus frequency. This shows that substantial reductions were made relative 
to 50/60 Hz equipment, but above 400 Hz, increasing iron losses, problems of 
skin effect, hysteresis, eddy-current losses, etc., resulted in decreasing 
weight gains. With the development of low loss irons (Metglass, etc.) and the 
trend to high speed rotating machinery, it is reasonable to consider 600, 800 
Hz primary and even higher frequency ac systems. 

The developments in aircraft engine technology have had a significant 
impact on aircraft power systems. The new turbojet and turbofan engines have 
narrower speed ranges, typically 2:1 compared to 3:1 or 4:1 for the earlier 
piston engines. This impacted favorably on the weight of the new synchronous 
generators since the specific weights of ac generators dropped to as low as 
1.2 Ib/kVA and, today, to less thann 1.0 Ib/kVA, (for modern high-speed ac 
generators) . 
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3.1.1 Engine speed impact . - The power generator system performance and 
weight are therefore closely related to the engine in terms of its speed range 
and the speeds of the accessory pads. For the conventional 400 Hz synchronous 
generators, Military Standard (AND 20006) pads having nominal speeds of 6000 
and 8000 rpm were provided. For the synchronous generators, such as the VSCF 
generators, however, the speed requirements were different since a cyclocon- 
verter VSCF system requires a 4:1 (input-frequency to output-frequency) ratio 
and therefore very high generator speeds. The dc link type VSCF systems has 
no special frequency constraint, but still requires high generator speeds 
since it is in the interests of both systems to utilize high speeds. Thus, 
the VSCF generator in both systems each benefit from high speeds in the range 
of 10,000 to 20,000 rpm. 

Where direct driven generators are used and there is no major In-line 
power conversion, the generators are running at approximately constant speed 
over the major part of the operating flight range of the aircraft engines. 
Therefore, with the right selection of the number of generator poles and the 
right speed, hybrid type systems of the variable voltage/ variable frequency 
type can be designed to operate at nominal frequencies of 400, 600, 800 Hz, at 
say the 92% cruise speed of the engines. 


3.2 Power System Alternatives 

The engine speed range, and the actual engine speecs from ground- idle to 
take-off thrust rating, are therefore critical to the performance of the power 
generator system. Typically, however, in most current ac electrical systems 
the ac generator is driven by constant speed drives (CSDs), so the generator 
designs are optimized via the technology resident in CSDs. because of the 
generator’s constant speed operation, the generators are able to furnish the 
same power at ground idle speed as they are at takeoff engine speed. The same 
is true of the early dc systems but, in this case, xt was necessary only to 
keep the voltage constant, whereas in the ac systems it was more complicated 
because the voltage and the frequency had to be held constant. It can 
therefore be seen that the CSDs provided aircraft generator with the luxury of 
constant speed operation, but a legacy of this was that the cost and com- 
plexity of the power generating channels increased. Mote importantly, the 
system reliability system overhaul time reduced to the disadvantage of the 
life cycle costs. Partly as a result of this, elec tt ic/ elec tronic approaches 
of the VSCF type systems were sponsored and developed under Military and 
industry funding. Also in the recent NASA/Lockheed studies (ref. 2) a 
variable voltage/variable frequency system (VV/VF) which had a ’’power-propor- 
tional- to-speed" characteristic was proposed, because few aircraft require the 
same amount of power at engine ground idle, as they do at takeoff (or cruise). 
One concern for the VV/VF systems was how large motors and transformers would 
operate from such a power supply. To address this, figure 21 shows the per- 
formance of the ac induction motors operating at different frequencies, when 
(1) the voltage is held constant and (2) when it is allowed to change with 
speed (frequency). Note that where the voltage is held constant, the motor 
develops excessive torque at the lower frequency and, normally, it cannot be 
absorbed by most loads (such as compressors). In contrast when the V/F ratio 
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Figure 21. - Induction motors: torque/speed characteristics. 
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is held constant, the motor stator-flux, (and the motor torque) remain con- 
stant over the speed range so this is very satisfactory for most loads in the 
aircraft • 

The development by the ! *.S. Air Force and Navy of systems using electron- 
ically derived methods of providing constant frequency from variable frequency 
power sources has been looked upon as alternative methods of providing high- 
reliability/ high-quality electric power, since it was thought that with no 
moving parts, the life cycle costs and reliability aspects could oe Improved. 
Also it was claimed that a direct engine driven generator would provide 
improved overall transmission efficiency in the power plant and therefore 
reduce the heat rejection losses in the engine nacelle area. 

More recently, NASA-Lewis has been examining the benefits and potential of 
a 20 kilohertz power transmission, which could take advantage of bidirectional 
resonant frequency switching mode inverters/converters that would permit con- 
version of this high frequency power to other forms of power, typically 
required in a modern aircraft. Also, because of the high frequency, NASA- 
Lewis should look to the use of Metglass and advanced mater ials/wire develop- 
ments tc take advantage of this type of high frequency transmission system. 

There are many possible aircraft power generating systems, and each has 
varying degrees of merit; some also are limited because of their development 
and lack of implementation status. The following delineates the systems to be 
analyzed. 


1. Constant Speed Constant Frequency, CSCF (such as the present CSD 
systems) . 

2. Variable Speed Constant Frequency, VSCF (such as the dc link and 
cyclo-converter systems). 

3. 270 Vdc Systems, as proposed by NADC. 

4. Variable Frequency Constant Voltage, VFCV, as used on some helicopter 
and early fighter aircraft. 

5. Special (nonstandard) Systems, such as the 

• Variable Voltage/Variable Frequency (as proposed in earlier 
NASA/Lockheed studies) 

• High Frequency (20 kHz) Transmission Systems (as proposed by 
NASA-Lewis Research Center) 

6. Dedicated Auxiliary Power Units. 

The first three candidates are considered viable to the degee that the R&D is 
significant and implementation has, or is, being effected. Candidate No. 4 
has the merits of simplicity and reliability, but the application has been 
limited to small (11 to 30 kVA) capacity systems, (e.g., the F-104) or to the 
large capacity systems on turboprop aircraft, such as on the P-3 aircraft. In 



the Electra/P-3 aircraft, the engines (Allison T5b) operate at constant speed 
so, to this extent, this direct driven generator system is another type of 
CSCF system. Candidate No. 3 is expected by the U.S. Navy to bring about an 
improvement in the power generation systems by the simple artifice of recti- 
fying the full output of each 200/115 V three-phase generator with n fnree- 
phase bridge rectifier: problems in this system, however, reside in the 

switchgear problems of 270 Vdc and the lack of development (availability) of 
270 Vdc equipment. Candidate 5 each, have characteristic merits and are in 
need of further evaluation: the VV/'VF utilizes presently developed components 

and can utilize different types of static power conversion. The 20 kHz system 
is a new entry into the APGS technology field and is presently in need of 
detailed evaluation, with respect to hardware, power transmission lines, etc. 
Candidate 6 is often proposed as a means of divorcing the secondary power 
system demands entirely from the propulsion system, but there are installation 
and other disadvantages. 

3.2.1 Constant speed drives . - It is clear that the CSDs, in their various 
development phases, have met the needs of the electric power systems in most 
military and commercial aircraft over the last thirty or more years. These 
CSDs were developed to drive generators, designed to specification such as 
MIL-G-6099/M1L-G-21480, and to furnish power to utilization equipment in 
accordance with MIL-STD-704B and later M1L-STD-704 specifications. Almost 
exclusively, these drives were of hydraulic-mechanical design, using back-to- 
back piston type hydraulic pump/motor elements (Sundstrand) , although GE 
developed a ball-pump CSD, which had limited in-field service application. 
Another concept, was the f ully-mechanical type of drive that was developed by 
the Lycoming Company. An updated version of this drive by Lucas Aerospace 
Company is now used in the U.S. Marine Harrier aircraft, the AV-8A; it is an 
11/20 kVA capacity system. 

In the hydromechanical types of drive, the operational principles of the 
piston and ball pump designs are the same: the earlier (Sundstrand) versions 

consisted of a variable-displacement hydraulic pump ported directly to a 
similarly sized hydraulic motor. The hydraulic motor was geared directly to 
the generator output ano, consequently, had to be sized to the torque capacity 
of the generator. T o this extent, these earlier drives were 100 percent 
hydraulic to mechanical power conversion systems compared to the later 
Sundstrand drives, in which the hydraulic elements were sized to make up the 
difference between the synchronous power output and the variable power 
(mechanical) input. These CSDs became known sb the AGL (axial gear differ- 
ential) and, later, t»*e IDG (integrated drive generator). In these later 
drives, the hydraulic motor, operated into a planetary (differential) gear 
system, in which the hydraulic motor output shaft rotated at a speed, and in a 
direction, to maintain a constant output speed for the generator. Speed con- 
trol of the motor was exercised, in the Sundstrand drive, by a swa*hplate and, 
in the case of the GE ball-pump drive, by an eccentric cam. 

Some of the early development problems of the hydromechanical drives 
resided in the high Hertzian stress levels, lubricity problems, close mechan- 
ical tolerances, harden lng/f in ishing processes, hydraulic-seal problems and 
thermal management. Overall, the problem of providing high torque/constant 
speed output over a variable input speed range is not simple, and the suc- 
cessful development of the aircraft type CSDs has been a pervasive problem. 
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For many years CSDs were a practical solution to the engrm • p« ed iangt 
problem and in the ensuing development their size and spec ii u: we ight have 
progressively decreased, making it diftiruii lor the all electric VSCF systems 
to complete purely on the basis of weight. 

The IDG side~by-8ide configuration (figure il) has been the most recent 
development in CSD technology and it has beta selected lor the looting / 5 7 / 7 fc> 7 
aircraft. It is a revised configuration of IDG thni retains most of the 
features of the in-line IDG, such as a spray oil-couieu (SOC) generator and 
similar hydraulic log elements, with improvements m packaging and hydraulic 
cooling/ lubrication. Overall, the new drive offers an improved, more compact, 
mechanical configuration which is projected to otter reduced lile cycle costs 
and lower maintenance support costs. For the future, Sunuatrend will evaluate 
higher power level drives and higher speed drives. 

Thermal management and overall efficiency of CSDs K m\d VStl s>^ieius) are 
important, so heat exchangers must be sized to handle the maximum heat dis- 
sipation, under the most adverse secondary cooling loop conditions. 

CSD generators are designed to provide M1L-STD-/G4 electrical power 
quality and performance. One performance requirement relates to voltag ad 

frequency recovery, when high loads are dumped on and off the generator. ’.he 
CSD typically uses an isochronous speed control (with no apeed-droop with 
load), but it relies upon a closed loop hydraulic servo and electro magnetic 
governor head trimming. When a sudden load is appl led to the generator tl>'re 
is a momentary droop in speed until the servo-loop corrects for the deviation 
by an adjustment to the hydraulic/spool-valve. Thus the performance charge 
ter 1st ic of the drive depends upon the loop gam, loop dynamics, ami the 
inertia constants of the drive. 

The paralleling requirement for CSD increases sophistication ui hit con- 
trol functions, since real load ana reactive load sharing must be eiiectec 
through current transformers, operating into static control circuits. Typ- 
ically, the minor adjustments are necessary to correct the minor offspeed 
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conditions (wnich affect real load sharing), and generator field excitation 
(which affects the reactive load sharing). These adjustments have in many 
drives been made through a magnetic trimming- head, which provides a vernier 
adjustment to the hydraulic spool valve. Some instability problems are pos- 
sible and can occur in paralleled CSD ir^tallations due to differences in the 
closed loop response. This type of instability is usually more manifest 
during generator synchronization and paralleling. Such perturbations, when 
they occur, result in ’'load-swapping” , and the instability remains until the 
system achieves stable real load sharing conditions. In the event of an 
overspeeding (over frequency) in one CSD channel, the other power channels 
receive "reverse- real- power’ 1 and the overspeeding generator "hogs" the load on 
the paralleled bus. During this anomalous operating condition, the "normal- 
speed" generators run as synchronous motors above the speeds of their respec- 
tive drives (via their overrunning-clutches) . The modus operand! of the CSD 
protection system in this failure mode is to return the system to nonparal- 
leled operation and to put the overspeeding drive underspeed condition; at 
this point the bus contactor, in the deviant power channel, is opened by the 
under-frequency protection. 

A parameter that distinguishes the CSD from the VSCF type systems is the 
method of "rating". Normally, a drive has a rating that is based upon a 
"cubic-mean loading", which means that the service life (TBQ warranties etc.), 
are dependent upon a definition of the load/speed schedule that will prevail 
in typical service. Thus the wear on the drive and its life/TBO statistics, 
are dependent upon this mechanical loading cycle. 

Assessment of the reliability of CSD systems is best made with respect to 
specific applications, since there is a wide scatter of reliability data, 
relative to different airplanes. Basically, CSD/1DG/1DGS systems are sched- 
uled for "on-condition" maintenance, except for servicing type inspections: 
oil must be checked say every 200 hours, which should take a few minutes, 
after access is provided. Pressurized oil-refills are necessary every say 
700 hours and this proced.^e may take approximately 6 to 8 minutes. Other 
typical inspections include checking the drives for leakage and for clogged 
oil fillers, which should take i to 3 minutes. 

3.2.2 VSCF technology . - The acronym VSCF is the generic reference given to 
power generation systems in which the constant frequency power is derived from 
static power converters that are furnished with variable speed/ var iable 
frequency power direct driven generators. It therefore relates to any system 
in which the variable frequency output of the generator is converted to 
constant frequency or constant voltage dc power. Typically, the output of the 
generators can be rectified within the generator housing or, it may be 
rectified remotely in a static power converter package Within this context, 
the following are evaluated as VSCF candidates: 

• Cycloconverter VSCF: ac to ac power conversion 

• DC Link VSCF; dc to ac power conversion 

• 270 Vdc (VSCF): ac to dc power conversion 

Figure 23 shows an artist* s schematic illustration of the VSCF 
cycloconverter and dc link technologies. 
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The cycloconverter VSCF has the advantage of being the beneficiary of the most 
R&D development and it has been adopted for the A-4D, A-10 and F-18 aircraft. 
The U.S* Air Force and U.S. Navy have also funded programs directed to the 
development of VSCF systems in capacities of 40, 90 and 150 kVA. These VSCF 
generators may be wound rotor or permanent magnet type, but recently 
samarium-cobait type rotors have been used with the converters that have been 
designed with a reverse-frequency programming-control, that permits the gen- 
erator to function (in the reverse mode) as a synchronous starter motor* The 
first production type aircraft installation of this type, in which electric 
generator is to be used as an engine starter, is the 40 kVA installation for 
the U.S. Air Force A-10 aircraft. 

Filtering is critical to the VSCF power systems and improved capacitors 
have been highlighted as key development items. Highly reliable filter 
capacitors with low specific volume are also a continuing activity in the 
development cycle of the VSCF power systems* The parts count is also key to 
the reliability and physical characteristics of the electronic assemblies, as 
are the electrical ratings of each of the components. While 

electric/electronic devices exhibit no physical wear characteristics, they are 
electro-thermally sensitive and voltage surges/spikes pose a threat to the 
junctions of the solid state power devices. Inadequately rated devices can 
therefore Inhibit reliability along with any inadequate implementation of the 
cooling provisions. 

A characteristic requirement of the cycloconverter system is that the 
input frequency to the converter (even at the minimum speed of the generator) 
be not less than three to four times the output frequency. This means that 
for a 400 Hz output, the frequency at base speed must not be less than 1200 to 
1600 Hz. A legacy of this is that the generator must be driven at high speed 
and be designed with a large number of poles. Typical pad speed requirements 
for VSCF generators are therefore 9500 to 21,000 rpm. Another characteristic 
endemic to the cycloconverter is the ratio of the generator-kVA to the 
bus-kVA. Typically the generator kVA is about 1.40 to 1.5 times the bus kVA. 
Also, like all constant power VSCF type power systems, the generator must 
furnish full kVA output down to one half maximum speed of the engine. Because 
of this, the generator, electromagnet ically, is capable of twice the output at 
the takeoff cruise speeds of the engines and consequently it is heavier than 
the CSD driven generators. 

Cycloconverter VSCF systems are available in "integral" or ’'split" sys- 
tems. In the former case, the electronics are accommodated within the gen- 
erator housing to take advantage of the oil cooling system provided for the 
generator. Figure 24 shows the rotor removed from its stator* It is normally 
press-fitted (for good thermal -conduction) into the tunnel of the housing* 

Oil through the housing allows an outward heat-transfer from the generator 
stators windings and an inward heat-transfer from the electronics. In "split” 
type systems the electronics are separated from the generator and are accommo- 
dated in a package which nay be located in the wing root area, or somewhere in 
the fuselage- Optional cooling is available for the electronic converter 
package and, although liquid loop cooling can be used, flow-through air 
cooling is more typical. Air cooling itself may be provided by discharge air 
from the cabin or by outside fan-propelled air on the ground* Air cooling 






tends not to be as effective as liquid cold plates, but the air cooling can 
provide higher reliability. Also there are more sophisticated cooling methods 
that could be considered in advanced aircraft designs. Cooling technology 
could include evaporatively-cooled cold walls, as proposed by Lockheed, by 
Immersing the electronic components in a thermally conductive fluid, such e» 
fluorocarbon (Fluorinert) liquid bath. This fluid is cooled by a novel Freon 
evaporative cooling device and expansion bladder conf iguruation. (See 
figure 25.) 
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Fi 0 ure 25. - Single board cold bath module. 
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An important engine consideration with the VSCF type power system is the 
requirement for high speed pads that must be provided on the accessory 
gearbox. To provide a less complex, lighter system, the oil cooling of the 
VSCF system in the power plant should be integrated with the engine oil 
cooling system. The engine manufacturer assumes responsibility for any 
integrated oil cooling system and priority would be given to the engine oil 
system in the event of any oil leakage problems in the generator. If the 
engine supplier cannot be persuaded to accept the VSCF generator cooling 
responsibility, then the provisioning of an autonomous pumping system would 
impose undue hydromechanical complexity on the VSCF power plant installation. 
Up to this time, the engine manufacturers have resisted the concept o.C inte- 
grated cooling, but with the use of SmCo generators, there is no rotor heating 
and, therefore, no need for through-t he -rotor cooling that requires dynamic 
seals. With this new technology change the engine manufacturer may now become 
more receptive to the idea of engine-integrated oil cooling systems. 

The attributes of the VSCF systems are that they can provide high quality 
power for loads such as ASW electronics, ECM, and the typical avionic equip- 
ments involving air data/flight management and other sensitive avionic loads. 
The latter systems are becoming increasingly important in advanced commercial 
transports. There are presently no issued MIL-SPEC documents for VSCF (and 
the 270 Vdc systems), although under the technical direction and coordination 
by Naval Air System Command a new specification, MIL-E-23001/3D(AS) , is being 
developed to cover the VSCF cycloconverter system. 

In VSCF power systems, frequency regulation can be controlled to fractions 
of a percent and there are, theoretically, no transient frequency deviations 
with respect to load and speed changes. Phase voltages are individually 
regulated which significantly reduces phase voltage unbalance with any unequal 
loading of the generator phases. It is however in the areas of reliabil- 
ity/maintainability and life-cycle costs that the VSCF suppliers claim to have 
their main advantage. It is argued that aircraft generators are already 
highly developed and, because the static power-converters have no moving 
parts, the reliability and maintenance support of the VSCF systems is 
projected to be better then hydromechanical electric systems. However, this 
may be simplistic to the extent that as stated, the highest reliability can be 
achieved only if the generator system supplier exercises diligent care in the 
thermal management of the electronics and conservative electrical ratings are 
used for the semiconductors, etc. Based on such criteria being met, it Is 
possible that the VSCF system life cycle costs could be lower than CSDs. 

As a continuing development activity the VSCF suppliers must work towards 
a reduction in the parts count and to developing improved transistors/SCRs , 
diodes, and capacitors. Some earlier VSCF converters had component counts in 
excess of 2000 and this worked against the objective of high reliability. 

With fewer parts and improved solid state technology, better performance, 
weights and reliability can be projected for the VSCF power systems. 

3.2.3 VSCF dc l ink. - Much of the technical overview given on the cyclo- 
converter VSCF applies to the evaluation of dc link VSCF system. Basically, 
the dc link VSCF is a dc-to-ac constant-frequency/constant power system that 
"inverts” the dc power that is obtained by rectification of the generator’s 
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variable voltage/ variable frequency output* Again an Integral design may be 
used, wherein power is rectified and contained within the generator envelope, 
or it may be a split system* In the latter case, the ac is rectified in the 
front-end and inversion is accomplished in a remotely located power 
electronics assembly. With the remote static assembly, cooling may be 
separately provided by a dynamic cooling loop of the liquid type or forced air 
cooling may be adopted (depending on the installation preferences of the 
aircraft company or the design dictates of the equipment supplier). 

Power quality of the dc link VSCF system is comparable with the cyclo- 
converter system, but the inverter requires input and output filters unlike 
the cycloconverter, which uses an output filter only. However, the dc inver- 
ter is less complex in that it uses fewer solid state components, e.g., only 
six full wave power transistors versus thirty-six SCR (six phase FW bridge). 
Also the power losses in the bipolar devices are less than the SCR. Finally, 
the dc link does not suffer the generator-to-bus kVA rating penalty of the 
§ cycloconverter, but it does require a neutral forming transformer on the 

i output. One other advantage of the dc link inverter is that the re- 

1 circulation of reactive kilovars is constrained to the output of the inverter. 

[ Again, phases are individually regulated in this type of VCSF system and 

\ frequency regulation is dictated by the frequency reference standard. The 

i unique difference of the dc link VCSF is that there is no four-to-one rela- 

>, tionship betweeen the converter output frequency and the generator frequency. 

.! Therefore, high frequency (vi;s: 1.6 to 2 kHz) power transmission (that neces- 

sitates shielded cables) is not a prerequisite of this system. As a conse- 
quence, conventional frequencies such as 400 Hz, or the less conventional 
fc frequencies of 600, 800 Hz and higher could be selected as the nominal power 

transmission frequency (at the normal engine speed conditions). These 
frequencies could be achieved by pole/speed combinations as follows: 

400 Hz: 4 poles/ 12, 000 rpra or 2 poles/24,000 rpm 

600 Hz: 6 poles/12,000 rpm or 4 poles/18,000 rpm, 2 poles/36,000 rpm 

800 Hz: 6 poles/16,000 rpra, 4 poles/24,000 rpm, 2 poles/48,000 rpm 

1200 Hz: 6 poles/24,000 rpra, 4 poles/36,000 rpm, 2 poles/72,000 rpm. 

In summary, the claimed advantages of the dc link VSCF are the localization of 
the recirculating kilovars (with nonunity power-factor loads); the lower 
stress on the power components; the few parts count and the fact that the 
generator kVA rating Is only about 1.16 times to bus kVA rating. Presently 
there are about three aircraft applications of the dc link system (the F-16, 
AV-8B, F-5G or F-20). It is of note that until recently the capacity of the 
dc link VSCF systems was limited by the transistors to about 40 kVA. 

3*2.4 270 V d c (VSCF ) . - While not normally considered a VSCF system, the 

270 Vdc power system does fall Into the category of VSCF systems, since it 
* utilizes variable-frequency power and it does obtain the power from direct 

driven generators of the wound-rotor or SmCo type. The Navy’s (NADC) sponsor- 
ship of a 270 Vdc development was prompted by their concern for the high 
maintenance support costs of other systems and the complexity of generator 



paralleling. NADC’s selection of 270 Vdc, vis-a-vis a cycloconverter on dc 
link VSCF system, was also based on the premise that the 270 Vdc power could 
be easily obtained without the use of complex electronic converters simply by 
rectification of any three-phase 200 Vac power supply. In this latter regard 
the ability to obtain 270 Vdc on carrier aircraft by the rectification of 
3-phase 200 V 60 Hz power was an influencing consideration. 

With three-phase 200/1 15V 400 Hz power, 270 Vdc can be obtained by the use 
of a full wave bridge rectifier, the relationship of the dc output voltage to 
the ac input voltage being related as follows: 


DC 


- / 2 ~ 


E, £ sin — 
L tt m 


( 1 ) 


where: 

* line-to-line ac voltage 

m * number of phases (H is expressed in radians) 

m 

Thus, a rectification of three phase power (by a full-wave bridge- 
rectifier, having six effective phases) results in a fundamental ripple of 
2400 Hz and the dc output voltage is derived as follows: 


E DC “ f 2 200 w sin l " 270.095 volts 


The conversion to 270 Vdc is therefore simply accomplished with a constant 
voltage three-phase 200 V input power supply, but the basic simplicity of the 
total system is compromised by the fact that fairly large amounts of 200/115 V 
400 Hz are required, and these power supplies must be provided by sophisti- 
cated electronic inverters. Also, since the generator operates over a typical 
2:1 speed range, the voltage of the generator is not constant, so phase-angle 
control of the full wave SCR bridge must be employed to harness the ac 
generator voltage at takeoff and cruise speeds of the engines. Thus, in the 
event of a regulator failure (or on short-circuit on the generator output), 
the 270 Vdc output will surge towards 540 Vdc and higher, thereby impressing a 
high recovery voltage across any fault interruption device. As in all 
constant power VSCF systems, the direct driven generators engender a 100 per- 
cent weight penalty in terms of their electromagnet (relative to the gen- 
erators driven by CSDs). 

The main shortcomings of the 270 Vdc power system are that the dc power 
cannot be used to power directly the very many ac and dc motors found in a 
large military or commercial transport-type aircraft. In such aircraft there 
may typically be more than 100 to 150 motors some of which, as in the 
IDEA/Alternate IDEA aircraft, might be over 100 hp. Brushless dc motors 
require static power inverters to furnish them with synthesized ac power, so 
the size, rating, weight and cost of these inverters will be related to the 
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horsepower requirement. As an example, a 25 hp Freon compressor motor would 
require approximately a 25 kVA capacity inverter and a cabin compressor drive 
motor, say 125 kVA Inverter. 

The development cf high rupturing capacity solid state or hybrid power- 
controllers are the other aspects of the 270 Vdc system concept. Natural 
arc-extinction is not present with dc switching (as it is in ac switchgear), 
so this presents a problem at high altitudes. Also, as stated, generators, 
designed for a 2:1 speed range will have prospectively high recovery voltages 
on release of faults when they are operating at full speed. Switchgear design 
and circuit rupturing capacity on short circuits are therefore key to the 
complete maturation of the 270 Vdc system. Further, the full and efficient 
application of 270 Vdc cannot take place until there is a conversion of the 
many present loads over to 270 Vdc. The development of 270 Vdc switchgear and 
270 Vdc utilization equipment must therefore be aggressively pursued to ensure 
the orderly development of this type of power generation system. 

An alternative which is considered attractive for the application of the 
270 Vdc technology in large capacity power systems projected for the IDEA/ 
Alternate IDEA type airplanes is a hybrid three-phase ac/270 Vac system. In 
this type of APGS, ac power is derived on a dedicated basis for loads where 
constant power over the speed range is required. Such critical loads would be 
the primary flight control surfaces in the IDEA. 

from a performance standpoint assessment the 270 Vac generator system is 
an essentially simple ana reliable generator concept. The power quality is 
good, and the high frequency ripple components can be relatively easily 
filtered, to provide a constant output level of voltage. On the other hand, 
the qual ity of the power delivered to many of the equipments not powered 
directly by the 270 Vdc will be dictated and determined by the sophistication 
of the inverters that provides this power. Similarly, dc t dc converters 
providing 270 Vdc to 28 Vdc (and other dc voltages) will have power quality 
inherent in the particular converters. There is no problem of phase voltage 
unbalance, etc., but at typical flight operational speeds, the output voltage 
of the generator must be harnessed by the use of phase angle control of a full 
wave rectifier bridge. Inherently the 270 Vdc generator is capable of provid- 
ing 540 Vdc at normal flight engine speeds, so under these conditions the SCR 
phase angles are delayed to limit the value to 270 Vdc. On the ground (at 50 
percent speed) however the generator capacity ana the SCR phase angles are 
advanced to a point where all of the area in each half cycle of the generated 
sinusoidal wave is utilizeo. 

3.2.5 VSCF technology: summary . - The foregoing evaluation of VSCF tech- 

nologies shows that there are no major clear cut advantages between the cyclo- 
converter VSCF, the dc linx VSCF, and the 270 Vdc systems. The cycloconverter 
VSCF has an impressive development genealogy and it has been developed in 
capacities up to 150 kVA and higher. Its performance has also been impres- 
sively demonstrated by the starting of engines up to the 40,000 pound thrust 
category. In addition, VSCF cycloconversion has also been the beneficiary of 
extensive laboratory experience and a large amount of flight experience via 
USAF/USN development programs. A salient difference between the VSCF dc link 
is that it does not require especially high frequencies and, therefore, does 
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not require very high generator speeds and the use of shielded-cables to 
mitigate the EMI problems. It has however been limited, presently, to the 
lower capacity systems, as in the F-5 G and AV-8B applications. The dc link 
like any VSCF system still needs high generator speeds (to be weight com- 
petitive with CSD systems) and, like the cycloconverter system, it requires an 
autonomous oil cooling system (one that is independent of the engine oil cool- 
ing system). The problem of furnishing oil remains one of the primary con- 
cerns for the VSCF/270 Vdc power systems: the alternative is to use blast air 

cooled generators. If step-up gearboxes are necessary it is possible that wet 
sumps with splash-lubricated gears could be used and the gearboxes could take 
advantage of conduc ted/ radiated cooling. A 90 kW gearbox with 2 percent 
efficiency loss would dissipate some 1.84 kW (approximately 104 Btu/min.). 

This would not pose a thermal management problem, however, the need lor a 
step-up gearbox will be a penalty only if a high speed pad is not provided on 
the engine and geared oil pumps are not required. In the IDEA/ Alternate IDEA 
it is projected that the engines will be designed to furnish the necessary 
high generator speeds and integrated oil cooling. 

One of the prospective advantages of dc link VSCF or a hybrid ac/270 Vdc 
system is the ability to use partial power conversion since, in most aircraft 
applications, there are no large demands for precisely controlled power on the 
ground. Under most operational conditions the turbofan/ turbojet engines 
operate in flight at a relatively constant speed (of say 92 percent), so the 
nominal (400, 600, 800 Hz) power supply could be used directly for the many 
utility loads, such as the galleys, heating, lighting, de-icing, and many ac 
motor loads. 

A typical weight disadvantage of the VSCF system vis-a-vis the CSD systems 
is that the generator provides 100 percent power over the 2:1 speed range. 

The CSD does this also, but the VSCF system is better able to adapt to a 
power-proport ional-to-speed concept to give it a weight advantage. As it is, 
a VSCF generator designed for 150 kVA at 50 percent engine speed becomes 
electromagnet ically equivalent to a 300 kVA machine at maximum speed. Also, 
like the 270 Vdc system, it has the potential for generating high voltages at 
maximum speed when it is designed to meet the overload requirements for 
M1L-G-21480 and prevailing generator specifications such as M1L-E-23GG1/3D- 
(AS). 

The 270 Vdc system presently lacks in-field service experience and suffers 
from the unavailability of a substantial inventory of 270 Vdc equipment. Also 
it cannot power motors directly. The other primary shortcoming is the problem 
of switchgear and circuit breakers/RPCs/SSPCs in handling prospectively high 
fault currents at high altitudes. The 270 Vdc system could, however, become a 
viable alternative when the switching technology improves and more 270 Vdc 
equipment becomes available in the marketplace. In the interim a conventional 
(VSCF) 200V/400 Hz and say a 400V/800 Hz type power system could still provide 
270 Vdc for any special 270 Vdc equipments simply by local rectification of 
the ac in those circuits. Thus, a nominal 270 Vdc power system could become a 
hybrid system with the capability of providing both 200 Vac and 270 Vdc power. 

Tables 6 and 7 are one supplier’s comparison and breakdown of the physical 
weight, size, characteristics, etc., of a VSCFs cycloconverter and dc link 
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TABLE 6. ELECTRIC POWER SYSTEM WITh V8CF CYCLOCONVERTER MAIN CHANNELS 


Item 

Est . 

Wt .(lb) 

Est. Size 
(inches) 

Est. MTBF 
(hours) 

Qty./ 

A/C 

Total 
Est . 

Wt. (lb) 



Remarks 

Cycloconverter 

Generator 

65.0 

12H x9W x 17L 

9,200 

3 

195 

— 

Cycloconverter 

80. C 

1,800 in 3 

4,000 

3 

240 


Main Channel 
GCU 

10.0 

12.6 x 7.6 x 4.9 

21,600 

3 

30 

Assumed 
same for dc 
Link System 

APU Generator 

45.0 

9D x 10L 

16,900 

1 

45 

Assumed 
same for dc 
Link System 

BP/APU Cent. 
Unit 

12.0 

12.5 x 7.6 x 4.9 

15,200 

1 

12 

Assumed 
same for dc 
Link System 

Control CT 
Package 

2.5 

7 x 5 x 3.9 

| 

500,000 

4 

10 

Assumed 
same for dc 
Link System 

DPCT Package 

1.5 

6.6 x 2.8 x 3.9 

1,000,000 

10 

15 

Assumed 
same for dc 
Link System 

QAD 

► 

4.0 



4 

_16 

Assumed 
same for dc 
Link System 



Total Component Weight 

563 



Estimated System efficiency Over Speed range @ 90 kVA (excluding Gen.-Conv. 
Feeder s ) : 73-77% 


Estimated Gen-Conv. Feeder Weight: 1.85 lb/ft 

Estimated Gen-Conv. Feeder Size: fe Phase, -2 tf6/Phase, 2 - 06 for neutral, 

and shield 


Estimated Gen.-Conv. Feeder Losses @ 90 kVA: 43 watt/ft. 

Estimated Coolant Flows, Main Engine Generator and Converter: 
Generator: 2-4 gpm, 150°C Oil 

Converter: 20 lbs/mln. 30 °C Air 



TABLE 7. ELECTRIC POWER SYSTEM WITH VSCF DC -LINK MAIN CHANNELS 


Item 

Est . 

Wt .(lb) 

Est. Size 
( inches) 

Est. MTBF 
(hours) 

> r* 

J 

Total 
Est . 

Wt. (lb) 

Remarks 

DC Link 
Generator 

57.0 

12H x9W x 17L 

9,000 

3 

171 

— 

Converter 

85.0 

1,800 in 3 

18,000 

3 

255 

Three 

parallel 

transistors 

Main Channel 

10.0 

12.6 x 7.6 x 4.9 

21,600 

3 

30 

Assumed GCU 
same for dc 
Cycloconverter 
System 

APU Generator 

45.0 

9D x 10L 

16,900 

1 

45 

Assumed 
same for dc 
Cycloconverter 
System 

BP/APU Cont, 

12.0 

i 

i 

! 

! 

! 

12.5 x 7.6 x 4.9 

15,200 

1 

! 

12 

Assumed Unit 

same for dc 
Cycloconver ter 
System 

Control CT 
Package 

2.5 

7 x 5 x 3.9 

i 

500,000 

4 

'0 

Assumed 
same for dc 
Cycloconverter 
System 

DPCT Package 

K5 ! 

; 

| 

6.6 x 2.8 x 3.9 

1,000,000 

10 

15 

Assumed 
same for dc 
Cycloconverter 
System 

QAD 

1 

4.0 

i 

i 

1 



4 

16 

Assumed 
same for dc 
Cycloconverter 
System 


Total Component Weight 554 


Estimated System efficiency Over Speed range @ 90 kVA (excluding Gen.-Conv. Feeders): 
7 8-82% 

Estimated Gen-Conv. Feeder Weight: Q.9 lb/ ft 

Estimated Gen-Conv. Feeder Size; DC, 2 06(+) t 2 - *6(-) and shield 

Estimated Gen.-Conv. Feeder Losses g 90 kVA: 7 watt/ ft . 

Estimated Coolant Flows, Main Engine Generator and Converter; 

Generator: 2-4 gpm, 150°C Oil 

Converter: 20 lb/mln 3Q°C Air 
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power system , based on a 90 kVA power channel. The tables show typical MTBF 
data and the lower portion of each table gives supplemental Information, such 
as power feeder weights, power feeder losses and coolant requirements. Mote : 
These data reflect a typical power generation channel and have no specific 
reference to the IDEA/ Alternate IDEA. The information Is, therefore, suitable 
only for a typical comparison of the cycloconverter and dc link VSCF system. 
Table 8 further amplifies the comparative characteristics of the two system 
except that the data shown In this table relate to a 30/40 kVA power channel. 

The thrust of the foregoing tables is to highlight the advantages of the 
dc link over the cycloconverter, primarily in the area of the MTBFs (reli- 
ability). It also favors the dc link in the area of fewer power devices, 
higher efficiency, higher temperature tolerance, etc. In this regard, the 
supplier's bias enters into the evaluation so the verifiable facts must, in 
the final analysis, derive from the real world operational experience* This 
applies to all the physical, performance, thermal, reliability, cost factors 
and other data. For this reason, it is difficult to quantify all the factors, 
pursuant to the evaluation and analysis of all the candidate electric power 
systems for the IDEA and Alternate IDEA- Therefore, at the end of this 
section, the trade analysis is made qualitatively rather than quantitatively. 

3.2.6 Variable voltage/var lable frequency . - This system is different from 
the previous VSCF power generation systems in that it is a hybrid system, in 
which power derived from the engine driven generators is used directly to 
power many loads, while a small percentage of each generator output is con- 
verted to high quality power for avionics and other sophisticated equipment, 
such as FCS computers, etc. 

By definition, a VV/VF system is a system in which the engine driven 
generator is either permanent magnet (SmCo type) machine, or a wound rotor 
machine (in which the field current is controlled, so that the voltage 
generated is proportional to frequency/speed). In such systems the V/F ratio 
16 maintained at a constant value over the speed range of the engines so there 
is no concern for magnetic saturation. Also the stators of ac motors operate 
with essentially constant flux. This means that in the case of motors, the 
torque is also essentially constant over the speed range. Similarly 
transformers operate at constant flux over the voltage and frequency range so 
the primary/secondary voltage values are related typically to the turns-ratio. 
The equations that relate the electrical design of motors and transformers 
(electromagnetic equipment) are shown below 

E - A. 44 kj k 2 NF <t> x 10~ 8 (1) 
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TABLE 8. - COMPARISONS BETWEEN 30/40 KVA CYCLOCONVERTER 
AND DC LINK SYSTEMS 



Cycloconverter 

dc Link 

01T Continuous 

80 # C 

120*C 

Device Temp. Limitation 

150°C 

200 *C 

System weight, lb 

77 

79 

Efficiency, X 

Lo Speed 

73.3 

78.1 

Mid Speed 

71.4 

76.3 

High Speed 

67.6 

72.9 

Switching Method 

Integral control 
with bank selection 

Microprocessor controlled. 
Precalculated, stored 
program switching pattern 

Switching Devices 

36 SCRs 

12 Transistors 
12 Diodes 

Generator 

Six Phase 

Three Phase-Rectified 

MTBF as a 

Function of Load 

and OIT (Power Devices only) 

80°C 40 kW 

4770 

83,119 

45 kW 

3987 

80,749 

60 kW 

2552 

70,542 

93 °C 40 kW 

3470 

67,659 

43 kW 

2837 

65,746 

60 kW 

1546 

57,143 

1 21 *C 40 kW 

1493 

40,933 

43 kW 

?132 

39,635 

60 kW 

478 

33,047 

125°C 40 kW 

1292 

37,554 

43 kW 

1132 

39,635 

60 kW 

388 

29,903 


where: 


kj - dispersion coefficient 
k., » c hording factor 

4m 

N - number of turns 
F ■ frequency in Hz 
$ •* flux 
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( 2 ) 


T * $ I 2 cos 0 

Ej skEj S a>2 

T - arctan 

F ‘ R 2 + sj X 2 R 2 

where : 

* stator flux 
1 2 « rotor current 
R 2 * rotor resistance 
X 2 * rotor reactance 
s * slip 

k ■ transformer ratio (stator/rotor) 


(3) 


These formulae are electromagnetic relationships; (1) shows the basic 
relationship that flux $ is proportional to the E/F ratio. (2) shows that if 
the stator flux ($* E^F) is constant then the rotor current 1 2 is propor- 
tional to skE and inversely proportional to the rotor impedance, where skE * 
voltage induced in rotor and R + sjX is the rotor impedance (a f the slip 
frequency of interest). Where the slip is very low i.e., when rotor is near 
synchronous speed, the sjX function is small and the rotor power factor is 
high. As shown in figure 21, the load torque and the pull-out torque 
characteristic of induction motors (operating with a constant */F ratio) 
remains relatively constant over the speed range. 

It is appr>priate to consider higher voltages and higher frequencies for 
aircraft such as the IDEA and Alternate IDEA. The frequency dictates the 
speed at which generators m"St be driven and the speeds at which motors will 
run when supplied with different frequencies. Peripheral speed constraints 
limit the upper range of frequency while the consideration of the high- 
altitude environment places an upper limit on voltage. Regarding the latter, 
it seems prudent to consider voltages not higher than say 400 V or 600 V, if 
problems of corona and voltage flash are to be avoided. Even then, careful 
installation practice^ will be essential to avoid problems at altitudes over 
30,000 feet. 

Clearly, if the E/F ratio of 200 V/400 Hz is retained, then this estab- 
lishes the value of the voltages at the higher frequency, t-.g., 400 V/800 Hz, 
600 V/1200 Hz, 800 V/1600 Hz. There is no mandate to maintain this 200 V/400 
Hz ratio, but it is logical to consider double-voltage and triple-voltage 
standard systems. Further, it is possible, in some cases to use three-phase, 
200 V/400 Hz m^tors/transformers on three-phase 400 V/800 Hz power if due 
consideration is given to mechanical and electrical constraints. For example, 
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a conventional three-phase, six-pole motor, running at 7500 rpm on 400 Hz 
power, would run at about 14,700 rpm on 800 Hz power. This much higher speed 
would impact on the bearing capacity/ life and it might be in excess of the 
limiting peripheral speed of the motor. Windage and friction losses would 
also increase. 

Further design considerations are the iron and copper losses incident on 
higher frequencies. Iron losses are represented by hysteresis and eddy 
current losses, while copper losses are related to current density. 


W, * n? x 10 7 watts/cm^ 

n 


* KF 6 1 * 6 

(4) 

2 2 

W - KFB 

o 

(5) 


where: 

W h « hysteresis loss in watts 
* eddy current loss in watts 

F » frequency in Hz 

B * maximum magnetic induction 

H = hyst.eretic coi.stant 

2 

T|ese formulae show that the eddy current losses are proportional to F 
and B , so they increase at a fa^tgr rate than the hysteresis losses with 
(which vary according to F and B ' ). These losses, with minor differences, 
relate to stator iron in motors and laminations in transformers, filters, etc. 

The frequency selection therefore tends to be a more sensitive parameter 
than voltage; also, as outlined in the Power Distribution Section, it affects 
the current density distribution in electric power feeders. This phenomenon 
was defined as "skin-eff er. t" wherein the current tends to crowd into the outer 
surfaces of the conductor, resulting in an inefficient use of the conductor 
cross sect if *. Skin effect occurs because the inner core of the cable has a 
higher impedance and so it operates at a much lower current density. Because 
it is a frequency related phenomenon, skin-effect is exacerbated by the higher 
frequencies and the current transfers more and more to the outer surface of 
the conductor as the frequency increases. 

The effective ac resistance of the cable therefore increases along with 
the cable reactance (X L * 2rrfL). Another side effect is that the cable power 
factor worsens at high frequencies and it is more manifest with the larger 
size (power-feeder type) cables. 
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From the above It can be seen that the selection of frequency and voltage 
for the VV/VF system must be constrained by the practical dictates of the 
utilization equipment. Clearly, a frequency such as 5 kHz would be too high 
for many ac motors , because too many poles would be required to bring the 
motor speeds down to usable levels. The formula relating the variables is 


F - N x P/60 (6) 



where 

F * in Hertz, Hz 

H * revolutions/min (rpm) 

P * pairs of poles 

Many fuel pumps, hydraulic pumps and other loads operate at speeds of 4000 to 
5700 rpm so high ratio gear reductions would be necessary to bring the motor 
speed down to these low values. For example, a six-pole *^otor operating on 
five kH 2 supply would run at 5000 x 60/3 * 100,000 rpm, and would require a 
gear reduction of approximately 20:1; also, the stress engineer would have to 
be critically concerned with the balance and whirling speeds of the rotor. 

For the VV/VF system, the practical dictates of the utilization equipment 
therefore would tend to drive the frequency reduction towards the double or 
triple standard frequency levels only (unless one were to accept a consider- 
able amount of power conditioning, as would be the case with a very high 
frequency system). Evidently, the VSCF cycloconverter system requires a high 
generation frequency because the nature of the power conversion process 
dictates a generator frequency that is some four times higher than the output 
frequency. Thus, for a frequency of say 800 Hz (at one half engine speed), 
the generator frequency (at full speed) would be 2 x 800 x 4 * 3.6 kHz. 

The selection of frequency in the VV/VF system is influenced by the desire 
to use as high a frequency as possible to drive turbomachinery at high speeds 
without the need for gearboxes; and, on the other hand, not end up with a 
frequency too high, that high gear reductions are necessary for many motor 
loads • 

Based on these somewhat antithetical considerations, the following 
voltage/frequency ratios appear reasonable. 

IDEA Three-Phase 400 V 800 Hz (0.5 E/F ratio) 

Alternate Three-phase 400 V 800 Hz or three-phase 600 V 1200 Hz 

IDEA 




These E/F values seem practical when the physical limitations on motor speed 
are recognized along with the problems of corona and low ionization potentials 
at high altitudes* 

Since the VV/VF system proposed is a partial power conversion system, it 
may have two or more high quality power supplies derived from the primary 
power supply. Since these dedicated power supplies will be typically low 
capacity and comprise only a small percentage of the total installed power 
capacity, the power quality of these supplies can be controlled to very close 
limits. All the other VV/VF power from the generators is available for the 
ECS, heating, lighting, galley, de-icing and miscellaneous actuation loads. 

Typical power specifications such as M1L-STD-704L govern the power-quality 
requirements for the 400 Hz, 270 Vdc and 28 Vdc utilization equipment; 
M1L-E-23001/3DAS (NASC, custooian) governs VSCF cycloconversion (does not 
address VSCF dc link). NASC is developing MIL-E-85583 (AS), a generic 
electric system spec (with slash drawings for Navy aircraft). The USAF, 
ASD/ENESS (WPAFB) is developing "MIL-PRIME Electric Power Subsystem, 

Aircraft." Specifications M1L-G-6099 and M1L-E-21480 relate to air cooled 
generator designs while M1L-G-25704 governs constant frequency (CSD) ac power 
systems. The SAE committee A-2Y continues to work on M1L-E-855E3(AS) and will 
also develop a 270 Vcc specification. 

The performance of the dedicated power supplies in the VV/VF system will 
therefore conform to the pertinent and prevailing specifications. An objec- 
tive of the VV/VF system, outlined in the previous NASA-LaRC/Loekheed Study 
(NAS1-16199, May 82), was to use a PM generator design where the V/F ratio was 
preserved over the load and speed without the neec for a voltage-regulator. 

To achieve this a different generator design having the following design 
characteristics would be necessary: 

• Relatively large air gap 

• Low synchronous-reactance, X^ 

• Low negative-sequence reactance, 

• Low zero-sequence reactance, X q 

2 

• Low 1 R losses in stator 

• Low core and pole-face losses. 

A generator of this type would not be weight optimized, but many of the 
electrical parameters would be improved. The increased air gap would itself 
yield favorable electrical characteristics. For example, voltage unbalance is 
a function of the negative and zero sequence reactance (X^ and X q ) and resist- 
ances (R^ and R ). both X^ and X decrease with increase of air gap length, 
so the pnase voltages will be less sensitive to load unbalance. The X^, the 
direct axis synchronous reactance, is itself a strong function of air gap, and 
it decreases with increase in air gap length; so as the air gap length 
increases, the transient-voltage excursions will also decrease. Operating at 



2 2 

lower current densities (0.9 to 1.25 kA/cm ) (6 to 8 kA/in ) in the stator 
would result in improved insulation life and increased efficiency. Finally. 

U pole-face losses which are exacerbated by small air gaps less than <0.025 in. 

would also decrease with a large gap of 0.06 in. 

2 

^ In a wound-rotor generator the 1 R losses in the field (and exciter) 

> increase. With a PM rotor there are no (rotor) field losses but the rotor 

magnet weight would be increased with the larger air gap. 

The main legacy therefore of the proposed generator in the VV/VF system is 
that it would be heavier than a conventional high synchronous impedance 
* machine, but the electrical performance will be inherently better. Whether 

the machine would operate without a voltage regulator from 0 to full load to 
overload is a matter for further study and evaluation. However, there are 
methods by which the voltage regulation could be constrained to low limits and 
; one of these would be to establish the air gap flux for the per unit voltage 

at a quiescent load level, typical for the IDEA and Alternate IDEA airplanes. 

Fortunately, in these aircraft the all electric ECS, for example, reflects a 1 

constant (large) load to the generators so loaa changes will be relatively 
low, compared to a conventional airplane. Also, there is the possibility, as 
proposed by Lucas Aerospace, that a novel method could be used for controlling 
the voltage of the PM machine without chopping-up the out >ut wave form with 
phase-controlled SCRs . These and other methods could therefore t j explored in 
; further evaluations of PM and would rotor generators operating w.^h a constant 

E/F ratio characteristic. 

V 

3.2.7 20 kHz power system . - The system which is discussed in this section 

was conceived at the NASA-Lewis Research Center and the evaluation is based on 
a description of the system provided by the staff of NASA-Lewis. Figure 26 is 

a schematic presentation of a 20 kHz system applicable to a twin-engined ‘ 

aircraft showing two 40 kVA generators driven by each engine and four 3-25 kVA 

bidirectional converters. As shown, the four converters are paralleled via 

isolation devices (contactors or SSPCs) onto two high 20 kHz distribution 

buses that are routed around the aircraft. The possibility of using 60 Hz 

external power was described for engine starting, using what was, in effect, 

"half-converters. 1 * Each half converters is bidirectional 1 a power flow, with 
an ability to "cross-start" (where one engine had failed in flight) by using 
one of the 1/2 converters on the other engine in a "power-sourcing" mode while 

the other 1/2 converter operated in a "power-receiving" mode. * 

The APU is eliminated on the basis that electrical (60 Hz) power could be ; 

used for engine starting rather than power from an onboard APU. Also, two j 

"bidirectional-conver ter s-with-charge-control" are used as the emergency j 

back-up power supplies that could be individually power-sourced by batteries ! 

in the event of an all-engine-out failure. Under this mode, the batteries 
would furnish power to the converters which, in an inversion mode, would power 
either or both, redundant (HF) ac buses via appropriate dual power switches. 

A third switch in the output of each emergency inverter/converter is used for 
furnishing power to a noninterrupt ac power bus. Other information in fig- 
ure 27 shows that power conditioning, for 20 kHz-to 400 Hz and 200 khz-to-low 
4 voltage ac or dc are accomplished via two converters (synthesizers) ted from 

■ the dually redundant HF ac buses. Cabin pressurization for the airplane is 



















RESONANT CONVERTER EQUIPMENT CIRCUIT 
(VOLTAGE OUTPUT) 

Figure 27. - Resonant converter equivalent circuit. 


furnished by engine driven compressor, rather than electric driven 
compressors. The two ECS power-conditioned buses shown in figure ?i> are used 
for Freon compressors, cooling fans, etc. 

The basic theoretical principal of resonant power switching mode 
converters with simplified schematics ol the type is shown in figures 27 
through 30. These diagrams respectively show 

Fig. 27 A square wave h^gh frequency voltage having a fundamental 

resonant frequency (typically 20 kHz) that is supplied across a 
series LC network. The load In this case being in parallel with 
C, although the load could be in series with LC. 

Fig. 28 The demodulation of a low frequency synthesized wave from the 
high frequency input wave. 

Fig. 29 Transformer coupling of two resonant converters to illustrate 
bidirectional power flow mode of operation. 

Fig. 30 Time-phased control of six switch bridge to synthesize three 
phase output at 1o t frequency. 

The above are basically illustrative of the 20 kHz power transmission 
systems and further discussion is given below. 

There are many power conversion/ Inversion methods that involve dc to dc 
(converters), dc to ac (inverters), and ac to dc (converters). Well known 
types already discussed in this report are the VSCF power systems that are 
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SYNTHESES OF THREE PHASE LOW FREQUENCY OUTPUT 

Figure 30. - Syntheses of three-phase low frequency output. 

described as cycloconverter or dc link type systems. The 270 Vdc system is 
also a VSCF type system inasmuch as the generator is direct engine driven and 
develops variable voltage/ variable frequency power. In terms of 
inverter/converter technology the following summarizes some of the basic modes 
employed in high frequency switching converters/inverters. 

• Cycloconverters (ac to ac); synthesizing a lower frequency waveform 
from a waveform some three to four times higher. 

• DC link (dc to ac) inverters; accepting dc input (such as 270 Vdc), or 
rectified ac, which is commutated at some high switching frequency for 
conversion to ac. 

• Switched mode power supplies, dc to dc, dc to ac, ac to dc, etc., where 
the objective is to achieve the transfer-function of an idealized 
transformer, i.e., the voltage/current waveforms on either side are 
faithfully reproduced in a lossless manner. 

Figure 31 is illustrative of a switched mode ac to dc converter. 



HF POWER 
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Figure 31. - Switched mode ac to dc converter. 


Within the generic definition of switched mode inverters there are 
different types 

• Fly back converters 

• Direct forward converters 

• Buck/boosc 

• Others 

The inverters/converters have in common an objective to use high fre- 
quency switching from 2 to 20 kHz and higher. This requires low loss 
transformer/f liter cores, such as Metglass, Perraendur, and 
vanadium/Permendur . 

• PWM (pulsewidth modulated) power supplies where a high frequency 
unmodulated waveform is pulse-width modulated. 

\ special form of PWM is the programmable type for motor speed control, 
where "ratio-changing** is necessary using asynchronous or synchronous 
modulation techniques to vary the input/output frequency ratios. 

• Cuk converters. - This is a special form of dc to dc converter and has 
the attributes that the input and output currents are nonpulsating. It 
is a step up/step^down type that is equivalent to a buck/boost 
converter, see figures 32 and 33. 

Special integrated (coupled) Cuk inverters not only are non-pulsating, 
but also have zero ripple on one side or the other. 
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• Resonant Mode Convertern: these are the converters of specific 

jnlerest (to the 20 Hz power system) and they are "four-quadrant" type 
that have the ability to be bidirectional and take ac or dc at either 
end. 

The main advantage of the resonant power mode converter over other types 
is the four-quadrant universal type operation anc its adaptability to large 
power capacities. The ability to utilize the resonant power converter 
technology in the large multikilowatt sizes is attributable to the low 
switching ana parasitic resistance josses. This again is a result of the high 
speed switching characteristic that operates at the fundamental resonant 
frequency, and the fact that such switching Is accomplished at zero cross- 
over. The high frequency sine wave characteristic Lhe zero cross over 

feature therefore lead to a convener design that projects low switching 
losses and high efficiency. 

The choice of the solid state switching device is itself key to the con- 
verter design, so the development ot bipolar devices, SCRs gate turn offs, 
(GTOs), gate assisted turn oft thyristors (GATTs) ana other advanced solid 
state switches pace the technology. The objectives are high voltage/current 
capacity and fast-swi tching N fast turn-off) times. Thyristor devices such <is 
SCRs have relatively slow turn off time (vis a vis 10 to 50 kHz commutation 
rates), since It is necessary to remove the holding current and to reverse 
bias the junction. Cn the other hand, thyristors developed for line 
commutated inverters (such as AEG-Te let unkens TX 1050) can be ratea tor 3000 
to 4000 A, rms, and for voltages up to 4000 V, Bipolar devices such as 
transistors offer much simpler turn-off control but are more limited in power 
capacity, having peak current capacities ot 200 to 500 A. For large 
capacities, therefore, paralleled transistors are required* G^te assisted 
turn-off thyristors based on recent technology improvements have much snorter 
to*, n-oft timer and faster recovery times. These advanced thyri&tor types secin 
to be a logical candidate for the 20 kHz resonant mode converters. Gate 
turn-off devices and special bipolars are other candidates tor future 
considerat ion. 

Overall, as regards performance, the resonant power mode converter appears 
to offer advantages particularly in the large power levels over the pulse 
width modulation (Pfok) , pulse width amplitude modulation (PWAM), b»r * ovt , 
buck/boost and other inverter converter configurations. Ihese l..r ver- 

sion/ inversion systems operate with relatively high efficiency, 
higher switching losses. Also, high frequency and choppers are ma f ' . by 

switching noise and the need for effective inpu^/output filters. 1.. 
tion of wide range harmonics and concern for RFi suppression ire there!' 
factors in the trade analysis of conv^r ter/ mver ter technology. 

Practical models of the resonant mode power converters have been in, ana 
work continues in evaluating them. The issue for the IDEA/ A1 ter ante IDEA in 
how the resonant power mode converter tits into the environment of an aircraft 
electric power distribution system and what are the installation considera- 
tions. In this regard, the first aspect is the power distribution wiring 
itself. Here there is the problem alreaay alluded to of "skin-ei f ec t“ and 
cable impedance effect. both of these factors work to exacerbate the problems 
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Figure 33a. - Cuk converter; unmodulated carrier waveform* 



Figure 33b* - Cuk converter. pulsewidti modulated waveform. 


of long distributed feeders carrying ac currents. They are present with the 
400 Hz and 800 Hz systems and, the larger cables reflect low power factors and 
higher voltage drop, due to the frequency-dependent (2rfL) effect. Also, the 
curvet* (Figure 37) show that at 3.5 kHz the impedance of an 0 gage cable is 
o.4 times larger than is impedance at 400 Hz. 

The result of skin expect and higher impedance voltage drops necessitate a 
new approach to hf cables in aircraft. Small stranded conductors insulated 
and fabricated with a specia' lay need to be developed. Small diameter wire 
could also be laid ground a flexible plastic core or tube, using a bifilar 
winding technique to inhibit self inductance effects. Practical methods of 
splicing and terminating the social cables must be developed. 

A6 regards the rtc^nn:.! power switching inverters, there appea r to be 
potential advantages that would merit their consideration and use in the 
IDEA/A1 ternate IDEA aircraft. However, it appears that these advantages may 
be best exploited by distributing the power at higu voltage dc 1* /els, or at 
lower frequencies, such as 400, 800, or 1200 Hz ac. The disadvantage of the 
dc transmission system is not unlike that of the 20 kHz system. For example, 
dc is the most efficient supply source of long distance power transmission* 
However, in aircraft high voltage dc power can be used directly for only very 
few loads and extensive power conditioning must be employed for the many 
motors that operate basically simple modes. The 20 kHz is in much the same 
category as 270 Vd;; it is not as suitable for heating (galley), deicing 
loads, etc. The resonant node matching inverters could, however, be inter- 
faced with advantage to the conventional and semiconvent ional ac systems by 
using front end rectification and then converting to 20 kHz, or otner suitable 



reionan t- frequency level * These inverters/converters coaid therefore be 
utilized in the IDEA/ Alternate IDEA on a dedicated basis. 

As previously highlighted, there has been ample tneoretical assessment of 
the t Icacy of resonant mode power conversion but it lacks the ©v re extensive 
practical background experience resident in cycloconversion, dc link, and the 
various other high frequency switching mode type inverters/converters. There 
is also a plethora of solid state inverters/conver t* rs/ being used in industry 
for ac and dc motor drives from the sophisticated lov; power levels up to very 
high power levels. For example, drives are available for synchronous motors 
from 500 hp up to 30,000 hp. Adjustable frequency ac drives for induction 
motors and synchronous motors are highly developed in industry at this time. 

From a technical standpoint, further laboratory work and testing is neces- 
sary to validate the resonant power mode converter for application to dedi- 
cated single functions or as a primary power source for multiple function/ 
loads, la the latter case, the able nature of the loads, in a typical 
aircraft, could present some nuances of operation that have not been presently 
addressed* For example, mar / previous solid state power inverters had very 
low source impedance with t result that, in the presence of he.ry overloads 
and short-circuits, the "through-fault.*' current was so high as to cause 
"self-destruct". In the case of the dedicated resonant power node converter* 
they can be "tuned" to the loan, but when they are used as a primary source 
the resonant frequency might become "detuned" by the nonl ir ar loads that draw 
harmonic currents. Also, the starting currents of large induction motors a 
significant consideration; the low standst ill-reac tance of these motors 
result in short-circuit type currents at power factors that are very low 
during starting. When running, the motors present a high impedance and higher 
power factor load. 

The series (current) and parallel (voltage) type resonant power converters 
could have different operational characteristics when used in the primary 
power source role. These should be fully evaluated in the ensuing develop- 
ment. The current type converter where the load is in series with the 
reactance and capacitance operates in a mode where the source-vol tage is 
developed almost completely across the load, and is, therefore, a function of 
it. In the resonant mode, the reactive and ,;apac itat ive voltages are anti- 
phasal and, therefore, cancel each other so the source voltage is absorbed by 
the loan. Should, however, a short-circuit occur, then there is no load 
resistance, and as in typical "acceptor-resonant" circuit, tne current can 
reach very high values and hig* voltages will be developed across the reactors 
and capacitances. Similarly, while either type can be designed to resonate at 
the fundamental frequency, the presence of harmonic current distortion could 
present a problem to the tuned resonant mode. 

The emergence of the 20 kHz resonant power converter technology becomes 
another interesting candidate in the proliferating field of high frequency 
switching mode inverters and converters. The 20 kHz resonant power conversion 
technology has potentially attractive features that need to be evaluated 
further. Of particular import is its efficacy as a primary power source 
because the aircraft application imposes a wide range of loads and loads that 
are non-linear in terms of their harmonic current draw. 
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Resonant power mode converters could still find application as dedicated 
power supplies for equipment and motors in the Alternate IDEA. The subject of 
static power inversion/conversion is an esoteric one and it is one that 
requires highly circumspect evaluation. Design considerations are sometimes 
antithetical: the requirement for high efficiency connotes low resistance, 

but low resistance connotes low damping, so the loop-dynamics and band- 
width/stability are affected. These are the design nuances that must be 
addressed in any closed-loop dynamic system, but they are key also to the 
achievement of stability aau high performance in the static power 
inverters/converter technology. 

3.2.8 Propulsion system interface . - The specific difference between the 
engines in IDEA aircraft (compared to the Baseline) is that the engine bleed 
air requirement is deleted and no pneumatic air is available for engine 
starting, air turbine motors, thrust-reversing, and hot air ice protection 
systems. This nc^V.eed engine therefore gains by a reduction in the SFC and 
thrust \ nalties incident on the baseline airplane. There are also weight 
gains that derive from the elimination of bleed port hardware, bleed air 
ducting orecooler installation, pneumatic starter Installation, miscellaneous 
other hardware^ such as splitter assemblies) and reduction in the engine 
weight. The E technology uS'1 is based on a bleed configured design, so it 
is not cycle-optimized for shaft power extraction. In the absence of a 
specific cycle-optimized design, the physical differences in the IDEA engines 
are computed parametrically from the baseline E design. The wight changes, 
when quantified, were cycled through the ASSET program. 

The mission profile is based on a constant mach number and is controlled 
by the automatic flight management system (AFMS) for maximum fuel economy 
(e.g., max still-air-range/lb. of fuel). In this mode, the power settings on 
the engine are decreased on route as a function of altitude- increases and the 
reducing fuel load. In addition to the minimum fuel burn, the AFMS can be 
programmed for maximum range, shortest mission time, and other modes. The 
mission electrical load profile used for performance calculations is shown in 
figure 34. 

The accessory gearbox (AGB) in the IDEA (as in the Baseline) is driven by 
the power take-off (PTO) shaft taken from a bevel gear drive on the HP spool. 
With the removal of the hydraulic pumps, the pneumatic starter, the 
CSD/generator assemby, the gearbox design, its weight and complexity are 
reduced. Consequently, it is referred to an "austere*' gearbox. Functionally, 
aside from the reduction in complexity, the horsepower to drive this gearbox 
is proportionally much less because of the simpler gear train and the lower 
friction/lubrication oll/hydrualic pump losses. Also, the HP spool is 
relieved of high breakaway torque of the CSD system and the oil viscosity 
changes at low temperature during engine starting at -39°F. Starting of the 
engines in the IDEA is therefore improved during cold day operations since 
there is reduced viscous drag. 

Another difference in the AGB will be a change to the torque/speed 
characteristics of the drive pads. In the Baseline, hydraulic pump speeds are 
approximately 1800 to 3800 rpm and the IDG AND 20006 pad for the 90/120 kVA 
IDGS about 4500 to 9200 rpm. In the IDEA, the pads for the two 150/175 kVA 
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Figure 34. - Mission electrical load profile. 


generators have an approximate speed range of 8600 to 17400 rpm. A number of 
drive configurations are possible In the IDEA that include fan case or core 
case mounted accessories. In figure 33 a "saddle mount" configuration is 
shorn in which the two generators are mounted on diametrically opposite sides 
of the gearbox. This arrangement is further exemplified by the fact that the 
common drive shaft in the AGB is terminated at each end with "master" spline 
that mates with a similar male spline on the generator drive shaft. This 
ensures that the generator rotors are automatically "synchrophased" , when 
installed. It also permits parallel operation of the generators in the 
engine-start or other modes. A similar concept, but using side-by-side 
generators, is shown in figure 36. 

Figure 37 is another Installation possibility that offers novel features. 
Here an in-line tandem generator is shown in which the mounting flange is 
picked up near its center of gravity. The two electrical terminal blocks are 
located at one end of the machine allowing the tandem machine to be inserted 
through the central mounting flange to connect into the drive geabox that 
could be integral or separate. The in-line configuration eliminates the need 
for mechanical synchro phasing since the machine designer can accurately 
control the angular relationship of the magnet poles. 

The pylon mount illustrated in figure 37 uses a novel tower-shaft 
disconnect which is incorporated in the compact planetary gear configuration 
located on the top of the engine. The reaction torque of the ring gear is 
effected via a pin that inserts through a hole in the outer periphery of the 
ring gear. This pin can be removed from mechanical engagement by an electro- 
magnetic solenoid that would be energized with the onset of any electrical 
shorts in the stator of the SmCo generators. Retraction of the solenoid pin 
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Figure 35. - AGB: generator saddle mount. 



Figure 36. - AGB: side-by-side configuration. 


would in this event allow the planetary gears to spin free. The solenoid pin 
approach is typical only since other elec trooechan leal actuation is possible. 

Other refinements (shown In the inset diagram) show the use of an 
electro-optic alignment method to permit reinsertion of the pin on the ground. 
A power drive method (power drill) allows for rotation of the ring gear 
assembly until the pin is lined up with the hole. A photo-transistor senses 
this condition via the incident light from a light emitting diode (LED) 
focused on the reflector located on the outside of the ring gear. An advan- 
tage of the pylon Installation is that it permits a very clean engine 
installation, but accessibility (for maintenance, etc.) is reduced. The 
inline (tandem generator) configuration is otherwise applicable to a 
conventional AGB mount configuration. 

The engine supplier will be requested to Integrate the AGB oil lubrication 
and oil cooling provisions into the engine system. As described in the trade 
analysis of alternative electric power generator systems, it is also strongly 
recommended that in the IDEA the cooling of the SmCo generators be Integrated 
into the engine oil cooling system so as to avoid additional complexity of 
mechanically driven pressure and scavenge pumps, and filters. A spiral 
housing may be used to enclose the back iron of the generators and fuel, oil 
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Figure 37a# - Tandem generator: typical installation# 



Figure 37b. - AGB pylon mount: in-line tandem generator with power 

shaft disconnect. 
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or other coolant could be pumped through this highly reliable heat exchanger 
circuit. There would be no contact of the fluid medium with any of the inter-* 
nal electrical parts of the machine. Because of this highly reliable cooling 
method for the tandem generators, it is not expected that the engine supplier 
would be concerned with the approach of integrating the cooling in with the 
engines oil cooling system. 

3.2 '9 Engine starting . - This function in the IDEA is furnished by operating 
the SmCo generators as synchronous motors during the start mode. In the VSCF 
type systems the static power converter/ inverter (in the output lines of each 
generator) is used In a "reverse power mode" and the voltage/frequency applied 
to the stator of each starter-generator (S -G) is programmed to control the 
acceleration rate and start-time of the engine. A prerequisite of this 
operation is that the commutation of the SCR s or the power transistors in the 
power electronic assembly be controlled by a rotor position sensor incorpor- 
ated in each S-G. In the direct drive generator system (DDGS), or variable 
voltage/ variable frequency (VV/VF) system, a separate/ dedicated inverter 
assembly is used to generate a quasi-square wave output for the S-Gs. Two 
starting inverters (to provide redundancy) were designed by Sundstrand 
Aviation for the junction and each weighs approximately 53 pounds. 

3 

A typical engine start characteristic for an E -type engine is shown in 
figure 38 for P6W STF-631-type engine. The HP spool on this engine has a 
polar moment of some 9.6 slug ft and its -40°F peak drag torque at light- 
off speed of 2600 rpm is approximately 130 ft-lb: minimum self-support speed/ 

ground idle speed of the engine is approximately 8600 rpm. Since the engine 
in the IDEA is the same as in the Baseline, the starting characteristic is the 
same except for the differences of higher breakaway torques, reflected by the 
accessories in the Baseline during cold start conditions. However, it can be 
seen that based on peak torque at light-off of 180 ft-lb, the horsepower 
delivered to the engine HP rotor is approximately 90 HP. 

As stated, in the horsepower rating of each SmCo generator for starting 
the engines in the IDEA is not as high as on the RB-211 and CF6 engines, but 
torque is still a key sizing factor in the generator. Based on a HP spool 
speed of say 12,000 rpm, an approximate 1.33:1 step down ratio, from the 
generator to engine (16,000/12,000) is necessary. This gear reduction 
provides torque amplification but the generator’s full load torque rating 
would be defined as follows: 


T - 5250 x (kW x 1.342) xq . 
N 


5250 x 175 x 1.342 x 0.87. 


1.33 
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• HIGH ROTOR POLAR MOMENT OF 
INERTIA - 9.5 SLUG FT? 

• STANDARD PRACTICE HAS SUPPLIED 50% 
MORE TOROUE THAN REQUIRED AT 
LIGHTOFF FOR ENGINE ACCELERATING 
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Figure 38, - NASA E technology estimated starting torcue. 


Where X * 

torque in ft-lb 

r l - 

transmission efficiency 

N • 

generator rpm 

K - 

gear reduction ratio 


3 

This shows that to start the E one of the two generators in each power 
plant, would necessitate going into the machine’s overload rating. The 
alternative is to parallel the two generators, since mechanical- indexing of 
the rotors permits this. Clearly, the capability for using only one of the 
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two generators for starting would be an advantage and any Increase in the 
electrothermal capacity of the S-G to do this would be worthwhile. The start 
mode of the electric machine nonetheless represents a more arduous condition 
than the generator mode. It is possible also to use an additional gear 
reduction In the st t mode and bypass it In the run mode, but this adds the 
additional mechanical complexity of gears and overrunning clutches. It is 
also possible to consider some other completely different proprietary 
approaches to engine starting in the IDEA. 


3.3 APGS Trade Analysis 

The trade analysis and selection of the alternative power generation 
systems was difficult because some of the systems, while satisfactory for 
particular applications were not so suitable when applied to the higher 
capacity system as exemplified by the IDEA and Alternate IDEA. Also, it was 
clear that while system weights are usually important to the trade analysis, 
in the IDEA/Alternate IDEA, the DFCS control system (and the electromechanical 
actuator system for the primary secondary flight controls) were critically 
dependent upon the reliability of the APGS. 

Safety is key in defining the reliability statistic of not more than one 
catastrophic failure in 1(T hours or 10 failures/h. In the conventional 
aircraft such rel lab illty/f allure statistics apply mainly to the structural 
integrity of the aircraft but they also apply to the flight control system, 
regardless of its design configuration and its source of power. The advanced 
technology precepts of IDEA/Alternate IDEA, however, add a new dimension to 
the critical analysis of the safety aspects, because not only is there a 
completely new method of actuating the control surfaces, but the actuation 
system is highly dependent upon an ultra-sophisticated DFCS, which in turn is 
critically dependent upon the reliability of the APGS. 

Sophisticated software, and its verification and validation further add to 
the overall concern for safety requiring that the same critical attention be 
given to the software design/ engineering as to the design of the DFCS itself. 
Notwithstanding, the IDEA/Alternate IDEA is confidently committed not only to 
its operation in regimes of relaxed static stability, RSS, but also negative 
static stability in which pitch active control system (PACS) has to provide 
reliability statistics commensurate with the airplane's safety objectives. 

Rellabil ity/safety thus stand as the key concerns and transcend the other 
parameters of this trade analysis. Since reliability is related strongly to 
the simplicity of design, it can be seen that complexity and sophistication 
tend to abrogate the reliability criterion. Therefore, simplicity in the 
power generation concept becomes an important yardstick of evaluation. 

However, there is a caveat inasmuch as it is not a stand-alone statement, 
i.e., the simplicity is not exclusive to the design and hardware implementa- 
tion of the power generating channel itself. For the APGS to score high 
marks, it must be simple in itself and it must not result in complications, 
increased weight or high maintenance support in the aircraft's systems and 
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utilization equipment. An example of this would be a requirement for 
excessive power conditioning in the utilization system. 

Maintenance actions/maintenance support were noted above and this becomes 
the next important parameter of assessment. To a major extent, excessive 
maintenance support costs hark back to reliability (MTBFs, TBOs) and the 
complexity of the systems installation. Clearly, complicated/ sophisticated 
systems require high standards of technical support on the ground, and the 
more involved the systems the more detailed the maintenance/checkout pro- 
cedures and the more protracted the corrective actions. The downtime a3 a 
result of these actions decreases the availability of military aircraft and 
reduces the operational effectiveness of the airlines. 

A corollary to the above relates to the mean-time-to-repair (MTTR). Here 
the figure of merit relates again to complexity, since the higher the parts 
count in a system or equipment, the lower is the statistical reliability. 
However, some equivocation is required because the supplier of advanced 
sophisticated equipment has moved more towards modularity in design and is 
using dedicated mlcroprocessers to monitor the status/failure modes of the 
systems/equipment. Such dedicated microprocessors isolate failures down to 
the LRU level and permit ready removal of the LRU for further diagnostic 
evaluation in the maintenance shop. Excessive use of BITE and modularity in 
design should not, however, preempt or usurp the objective of achieving the 
required performance with the simplest and most reliable system/ equipment. 

The suitability of adapting the APGS to high power levels is another 
important weighting parameter. Some sophisticated, and otherwise highly 
suitable electric power systems, may not be suited to the IDEA/ Alternate IDEA 
application since the total installed capacity requirement could be much too 
high for 100 percent power conditioning. In the advanced military transports 
major power demands may derive from the application of sophisticated military 
weapon systems. 

"High power,” in turn, emphasizes high overall transmission efficiency and 
the need for reducing the heat dissipation characteristic. It is clear, if 
the AFGS demands major thermal management design consideration, it will impact 
unfavorably on weight, size, reliability and cost. Efficiency and thermal 
management therefore become Important additional evaluation factors. 

Weight is a consideration in any aerospace system and the industry is 
conditioned to addressing this aspect in the design and development of light- 
weight systems and equipment. A possible difference in the IDEA/ Alternate 
IDEA is that while weight is important, the reliability criterion is more 
important, and random failures should not be a legacy of weight reduction 
efforts. 

In the trade analysis itself, a reasonable amount of effort was directed 
to a "critique” of the CSD, VSCF, and 270 Vdc systems because they are tech- 
nologically mature and competitive systems within their own right. In the 
case of the VV/VF and the 20 kHz systems, the treatment was somewhat different 
since these systems are Immature and without the benefit of significant 
background. Consequently, these systems were not critiqued, per se, but 


Instead they were technologically evaluated more in a tutorial manner. This 
was done because there is a lack of understanding as to practical implemen- 
tation aspects of these systems and there is a concern in the industry as to 
their total efficacy when applied to future transport aircraft. As regards 
the differences betwt.en the VV/VF and the 20 kHz power systems, the latter is 
more in need of investigative analysis and design activity by the aerospace 
electrical Industry since it is not possible at this time to quantify the per- 
formance, size, weight, cost, reliability and other details, in a real world 
Implementation of the system. The same is not true of VV/VF since it takes 
advantage of many of the technologies that now reside in the aerospace 
industry, e.g., samarium cobalt generators/motors, induction motors/ genera- 
tors, solid state power switching and solid state power conversion/ inversion 
technology. At the outset, the VV/VF should enjoy the attributes of 
simplicity, reliability and high power transmission efficiency. 


3.4 Selected Power Generation System 

The decision and selection of the electric power system was difficult 
because of the mature status of many of the competing systems for the IDEA 
application. While a matrix comparison with numeric ratings assigned for the 
respective evaluation parameters could have been used, it would define the 
selection in an unequivocal manner and it would mask the benefits other sys- 
tems might have were some of the ground rules different. For example, the 
selection process could have been Influenced in a different manner if the 
capacity of the individual generating channel were say 90 kVA or less. Also, 
the number of motor loads in an airplane have a major bearing on the design 
configuration and efficacy of a particular system. Clearly, if power is 
generated at a voltage and/or frequency level that necessitates excessive 
power conditioning, then the total system suffers in terms of weight, com- 
plexity, reliability, maintenance support and cost. In another airplane, such 
as a military type, it is possible also that the weapons system and avionics 
could be key and have a major Influence on the design of the APGS. For 
example, in military aircraft there is also a different interplay between the 
requirement for cooling and pressurization. In a large commercial airplane 
the pressurization requirement at altitude is the dominant load, compared to 
the cooling requirement, whereas in a large military ASW type aircraft, the 
pressurization requirement could be low and the cooling demand high. 

Acknowledging the above design factors and the type of loads in the IDEA 
configuration, a variable speed variable frequency VSVF (VV/VF) type system 
was selected for this airplane, having two 3-phase 400V 800 Hz 150/200 kVA 
generators in each of the three power plants. 

Figure 39 is a bar chart peak load analysis covering the different 
segments of the mission profile, showing that the maximum continuous load 
demands occur during the 35,000 ft/0.8M cruise condition. This is the 
condition where full cabin pressurization is effective and where other large 
loads such as the galley, flight controls, lighting, avionics and other loads 
such as fuel boost/ transfer pumps, are in operation. Based on these loads, 
the maxlmua continuous rating of the tandem generators in each power plant is 
approximately 160 kVA or 80 kVA/ generator. As indicated, the cabin 
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Figure 39. - IDEA airplane peak electric loads vs mission segment. 


pressurization requirement is the major load in the airplane and unlike the 
galley, it reflects a continuous power demand to the electric power system. 

Using a nonregcnerat ive ECS approximately 140 hp would be required to 
supply 1.4 lb/o.ic of bleed air per engine. For performance calculations in 
this study it was assumed that a regenerative ECS he used in which ECS air, 
instead of being dumped overboard, is passed through a heat exchanger and then 
through a power turbine attached to the ECS compressor, thus decreasing the 
ECS electrical power requirement. In this manner cruise ECS power is reduced 
to 94 hp/engine. As shown in Chapter 11, non-ECS loads for the Baseline and 
IDEA are very similar, since those functions that were performed hydraulically 
on the Baseline are performed electrically on the IDEA. 

The conclusions and summary of the above overview are: - 

(1) The choice of the APGS in the IDEA is dictated, more than anything 
else, by the magnitude of the loads and the type of loads in a large 
commercial international range transport. 

(2) The horsepower demands of the "ut ility/FCS" loads, are approximately 
the same, in the baseline and the IDEA. 
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(3) The major difference is In the comparison of engine bleed vs. shaft 
power extraction as qualified by the above discussion. 

Finally, it is relevant, as described later, that the motor driven cabin 
compressors and the ECS in general are powered directly from the engine driven 
generators, without intervening electronics. 

3.4.1 Electric power system design . - The primary power supply for the IDEA 
comprises six-engine driven SmCo generators (two per power plant) operating in 
a nonparalleled configuration, and each having a nameplate rating of 150/175 
kVA. Because of the high power level and to save cable weight and electro- 
magnetic weight, a double standard voltage and frequency system has been 
selected. This means that the 6-pole generators develop 3-phase 400 V 800 Hz 
power at a nominal speed of 16,000 rpm which corresponds approximately to 92 
percent high-pressure spool speed. Each generator, being a permanent magnet 
(SnuCo^) type machine, develops voltage that is approximately proportional to 
engine speed, so the following electric power characteristics prevail over 
typical engine speed conditions: 


Condition 

Engine Speed 

Volts 

Freq (Hz) 

Take-off 

1002 

435 

870 

Max Cruise Climb 

962 

418 

836 

Altitude Cruise 

942 

902 

408 

392 

816 

784 

High Altitude Descent 

852 

370 

740 

Approach 

802 

348 

696 

Ground 

642 

278 

556 

As evident, the E/F ratio remains approximately constant over the total 
speed range and it is a characteristic that is ideal for ac induction motors 
The primary ac voltage is also suitable for most heating/ lighting loads, 


transformers and other electromagnetic equipment. During the cruise regime 
and practlally all other parts of the mission, the Engine speed variations are 
small, so an approximate constant voltage/constant frequency characteristic 
prevails over most flight conditions. 

While the primary power system operates as a variable voltage/ variable 
frequency (VV/VF) system, it is projected in the time frame of the IDEA that 
there will be a significant inventory of equipment still requiring the con- 
ventional 3-phase 200 V 400 Hz type power system. Because of this, four 25 kW 
constant voltage/constant frequency (CV/CF) electronic assemblies furnish the 
demands for high quality CV/CF power in the IDEA. Other special power sup- 
plies, such as 270 Vdc are derived from 3-phase phase delayed rectifier (PDRs) 
assemblies that front-end the power electronics of the FCS servo actuators. 
Four dedicated PDRs could have been used to furnish 270 Vdc, but the dis- 
tributed approach was selected. Finally, 28 Vdc power can be supplied either 
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by unregulated TRUs (transformer rectifier units), or by switching regulator 
power supplies powered from the dedicated CV/CF power system. The latter 
could also be used for other special low voltages 5, 12, ’ r V power supplies. 
The dedicated power supplies are discussed further in this section. 

3.4.2 Generator power system control . - Each power channel Incorporates a 
sophisticated supervisory control that furnishes the necessary logic for the 
control and protection elements for the complete power system. As with the 
baseline systems, a microprocessor-based supervisory panel Is used for each 
power channel and It operates autonomously, outside the digital lcad/power 
management system. This latter system (described lti Section 5) is responsible 
for "total system" management and it will not interfere with the role of the 
microprocessor based supervisory panels In their real-time monitoring of the 
Individual power channels. Any anomalies in the system voltage/frequency, 
presence of power feeder faults (open circuit, open phase, short circuit, 
differential fault) are policed by the Individual supervisory pa. els and 
appropriate action is initiated to avoid problem conditions. Abnormal system 
behavior, loss of eng ine/ generator , etc., are also monitored by the super- 
visory panel and information is flagged to the central digital power/load 
management system, which will take appropriate action to reinstate any power 
loss to particular electrical section. The central digital processor system 
also Incorporates the logic to effect an orderly and sequential disconnection 
of loads, to avoid any overloading of remaining generators or individual power 
feeder sections. 

To a major extent, the microprocessor based supervisory panel in each 
power channel is simplified to the extent that It is not necessary, as in a 
paralleled electric system, to monitor and control the real and reactive power 
balance between the paralleled, electric generators. The system is also free 
of synchrophasing procedures, necessary to effect paralleling, and the sophis- 
tication of providing a real-time unambiguous isolation of aberrant power 
channels. Similarly, the generators are direct engine driven, so there can be 
no overf requency/under frequency , overvoltage/undervoltage conditions, unless 
the engine itself overspeeds or underspeeds. Clearly, any speed anomalies in 
the engine will be monitored closely by FADEC (Full Authority Digital Engine 
Control) and appropriate action will be initiated to correct the anomaly by 
the engine monitor system or shut down the engine. 

3.4.3 Electric generator design . - A desired characteristic for the generator 
In the IDEA is for it to have a low voltage regulation. The extent to which 
this Is realizable will be subject to a detailed generator design, but a major 
simplification could accrue to the power system If the generators possessed 
inherently stiff voltage characteristics. To accomplish this, the generator 
would have to be designed with a larger than normal air gap and with magnets 
that are relatively insensitive to strong demagnetizing fields B-H values). 

The development of the rare earth permanent magnets with Increasingly high 
energy products and a flatter &-H characteristic with no sharp knee will 
contribute favorably to the design of such an Inherently stiff electric 
machine. Samarium cobalt magnets or neodynium- iron-boron (N^ornax) will offer 
energy products of over 33 x 10 gauss-oersted. Other new magnet materials 
will evolve with even higher energy products and more stable B-H characteris- 
tics. It Is further possible, with different iron-to-copper ratios, to 
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control the reactance values of the machine so that the generator is less 
sensitive to load changes and load unbalance. The direct axis reactance 
value, X^, is itself strongly influenced by air gap length and decreases with 
increase in the air gap length. 

Figure 40 is illustrative of how the generator's reactances vary as a 
function of the air gap length. Tn many current aircraft generators, the 
direct axis synchronous reactance is typically about 2.5 to ^.0 per unif. An 
X^ of about 1.5 PU however would be a "stiffer" machine from the standpoint of 
voltage regulation and consequently less sensitive to load changer. The X^ is 
of interest since this also decreases with increase of air gap, so again it is 
a favorable trend, in that the transient overvoltage and undervoltage on 
release and application of load are reduced. S 'larly, the negative 
sequence reactance reduces favorably with air gap length and this reduces the 
voltage unbalance with uneven loading of the three phases. This latter effect 
is shown in figure 40b, where it can be seen that a machine with an X^ of 1.5, 
and an of 0.12, would have a voltage unbalance (with MTL-C-6099 specified 
unbalanced loading) of about 2.7 percent, compared to about 1.2 percent with a 
conventional machine. Finally, it can be seen that the generator efficiency 
characteristic could be maximum at the larger air gap values. 

Electric machine design is therefore key to the performance of the large 
capacity generators in the THEA and Alternate IDEA and the machi* ~ designer 
has the ability to evaluate many computer designs as he changes L..e different 
electrical and mechanical parameters. Presently, most aircraft generators are 
designed for minimum weight and performance compliance with prevailing aero- 
space electric generator specifications such as MTL-0-6099 and MTL-C-214EO. 
Historically, the machines have small air gaps and high synchronous reactance 
values. As a consequence, they have inherently poor regulation and lower 
short circuit currents. The computer design that calls for large air gap and 
low voltage regulation will, on the other hand, be less sensitive to load 
change and will correspondingly exhibit high short circuit current charac- 
teristics . 

Wire gage is another influential factor in the generator design since high 
electric loadings (high amps/in') will not only increase the T R losses and 
decrease the efficiency hut will also increase the TR drop component. Very 
high current loadings will also increase the conductor and insulation temper- 
ature and this too will increase the wire resistance and so increase the TR 
drop. The design objectives are to keep the TR and IX voltage drops i.< the 
generator low and to minimize the effect of armature reaction or the demag- 
netizing cross ampere turns. 

Tn the evaluation of alternatives to low regulation machines, it is also 
possible to consider the use of electro-dynamic control methods that will not 
only provide regulation of the generator voltage, but also mute the permanent 
magnet excitation to avoid the necessity of mechanical isolation of the 
machine when stator short? occur. Finally, there is the simple artifice of 
establishing the per unit regulation point of the machine, at a typical 
quiescent load level as may he typical of the cruise altitude operating 
condition of the generator. Tn the IDEA the ECS load reflects a relatively 


3 


94 


0 



DIRECT AXIS SYNCHRONOUS REACTANCE 





high steady state demand and so It would be possible to establish the per unit 
air gap flux in the machine at this load level thereby limiting the regulation 
range . 


3.5 IDEA Electric Power System Configuration 

The electric system in the IDEA comprises the following: 

• Primary ac power system 

• Special dedicated power supplies 

• Flight crucial power system 

• Power distribution system 

• APU/e^ternal power. 

FJgure 41 is a simplified electrical schematic of the primary ac power 
system that consists of six three-phase 400V 800 Hz 150/175 kVA direct driven 
samarium cobalt, generators, operating in a nonparalleled configuration. As 
previously described, each of the six channels incorporates a microprocessor 
based supervisory panel that monitors performance status of the generator 
channels and interfaces their control with the digital power/load management 
(DP/LM) system (which exercises total system management). Engine/generator 
failures, fault diagnostics, BITE monitoring are all included in the super- 
visory panels with appropriate status information being flagged over the 
digit ial data data bus system to the flight station. The supervisory panels 
operate autonomously to de-energize and trip faulty power channels, but the 
DP/DL system accepts flight station commands while its processer system 
effects control over the multiple power feeder section breaks to ensure power 
continuity when engines and/or generators fail. 

Conventional protection is afforded each power channel and the following 
are incorporated: 

• Over/undervol tage 

• Over/ under frequency 

• Negative sequence current 

• Phase sequence. 

As previously stated, it is possible that the 0V/UV and 0F/UF protection 
could be eliminated by taking advantage of the overspeed/underspeed control 
protection on the engine. The typical differential protection is not used in 
the IDEA since, in a distributed bus system, it is difficult to provide feeder 
protection zones. Therefore the negative sequence current is used and this 
will protect against any line-to-llne and open phase faults in the distributed 
buses. A further recommended feature is that an insulated generator neutral 
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feeder or high impedance grounded neutral system be used to avoid the high 
destructive fault currents that are incident on line-to-ground faults. 

3.5.1 IDEA: digital power/ load management . - A primary function of the DP/LM 

system will be the management of the feeder section ties/ breaks and the 
operation/ interface of the aircraft's primary ac system with the emergency 
power system, the APU system and the external power system. An erasable/ 
programmable read only memory (EPROM) is incorporated within the DP/LM system 
and provides for full automatic control of the complete electric system: it 
slso accepts manual input commands from the flight station. Appropriate 
signal sources/ transducers are incorporated to monitor the status of all 
contactors (section ties/breaks) and the operational status of external/APU 
power, etc. Responding to the automatic/manual inputs and the logic in 
memory the DP/LM system sequences the proper closure and opening of all 
contactors/bus section ties In response to operating conditions. Such control 
must have the highest reliability and Integrity since the DP/LM system is 
responsible for ensuring power continuity and ensuring there is no Inadvertent 
paralleling of the various electrical power sources. 

A subset of the power management function incorporated in the DP/LM 
system is the equally-important load management system. This also is an 
integral important element of the DP/LM system since, while the power manage- 
ment system operates to transfer generators to different feeder sections 
the software program will act to effect a disconnection of loads in accordance 
to their assigned priority levels. The software program actually establishes 
the hierarchial level for all the loads in the IDEA/ Alternate IDEA and this 
will determine their priorization status. 

3.5.2 IDEA: dedicated power supplies . - These relate to those power supplies 

that furnish special power charateristlcs to selected systems and equipments. 
The 3-phase 200V 400 Hz CVCF system is one of these systems and it comprises 
four 25 kU static power electronic assemblies. These supplies provide the 
quad redundant power sources for the DFCS and also furnish power to the 
non-FCS avionics system and other loads that require CVCF power such as 
synchros, gyros, fans, T/R units. 

Figure 42 is a schematic showing that the quad redudant 3-phase 200 V 400 
Hz power supplies are powered from the quad redundant ac power feeders that 
are routed in the fuselage of the IDEA and Alternate IDEA. As shown, the 
front end of the static power supplies consist of a 3-phase SCR rectifier 
bridge to permit a 270 Vdc constant input voltage to the inverter section of 
each of the 25 kU power supplies. A tap is also made on the output side of 
the SC* bridge the purpose of which is described later. However, in normal 
operation, the SCR bridge acts as a phase delayed rectifier (PDR) assembly in 
which the phase angle of the SCRs are advanced and retarded in response to the 
voltage level of the primary ac generator system. Thus, during cruise flight 
with the three-phase ac line voltage at 400 V the SCRs are phase delayed, 
while at idle descent let down and on the ground the SCRs will be phase 
advanced. In this manner, 270 Vdc power is maintained constant over the 
approximate 2:1 voltage range of the primary ac power system. 
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Figure 42. - IDEA flight critical electric power. 


3. 5. 3 Flight crucial power system . - The emergency pow^r system Is key to the 
flight critical loads and tc the achievement of the 10 reliability 
ob lectlve. 

It Is Import .nt to the reliability modeling and the overall complete 
design of the Iu<3A electric power system that the critical attention be paid 
to the avoidance of complexity in each power generating channel, to achieve 
the highest reliability and integrity. Similarly, specific attention must be 
given to the redundancy and reliability of the power feeder distribution 
system itself. The IDEA has six generator sources, the generators are non- 
paralleled, and the feeder distribution Is designed to provide quad redundancy 
In the wings and fuselage. These feeders are physically/spatially Isolated 
and they are Insulated from ground potential. The primary power source 
reliability In the IDF A/ Alternate IDEA is therefore very high and it is backed 
up by an ultra high reliability emergency power system that Is dedicated to 
support the '^CS and other flight critical loads. 

Figute 43 Is a schematic of the flight crucial power system showing the 
multiple power sources available to the quad redundant inverters that furnish 
power to the DECS computers. As shown, the four CVCF power supplies are 
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Figure 43. - IDEA flight critical emergency 270 Vdc power. 















supplied by the quad redundant primary ac feeders* After rectification to 270 
Vdc by the 3-phase SCR rectifier bridge that front ends each Inverter a tap is 
provided to permit the inverters to be fed from the emergency power system 
sources (EPS1 and EPS2) and the APU system* The diodes , Dl, serve as 
isolation diodes and prevent back-feeds from the inverters into the emergency 
power lines* They also prevent unplanned paralleling of equipments* Diodes 
D2 serve a similar purpose and prevent EPS1 and EPS2 from back-feeding into 
the 270 Vdc lines from the APU’s rectifier assembly. The emergency power 
lines are additionally protected with current limiters, fuses or circuit 
breakers, to prevent the emergency power sources from being pulled down by 
line faults or short circuit faults in any of the individual inverters* To 
increase further the redundancy of inputs to the DFCS computer, the outputs of 
the dedicated inverters are cross strapped in pairs as shown in figure 43. 
Current limiters protect the cross-straps since it is possible for faults to 
occur in the front end of the DFCS computers themselves* 

As configured, the quad redundancy of the DFCS computers can only be 
compromised by failures within the computers since, even in the event of an 
all-engine out condition, the four inverters supplying the DFCS computers can 
still be supplied by the two emergency power supply (EPS) units and/or the 
APU. In this type of extended emergency the EPS1 and EPS2 will furnish 
non- interrupt power to the four inverters to maintain flight critical power. 

On detection of the emergency, the DP/LM system will initiate automatic 
start-up of the APU and the emergency power sources will, in the interim, 
power the DFCS system and other flight critical loads, until the APU generator 
and rectifier come on line. It is possible that there will be more merit in 
running the APU at light loads, continuously. 

Other abnormal and emergency operating conditions are less critical, since 
power outages of the four inverter power sources cannot be conceived, without 
the most unusual combination of multiple equipment and power feeder failures. 
For thi£ reason and the high reliability/redundancy levels, the objective of 
the 10 reliability objective for the DFCS and flight critical loads can be 
achieved. 


3.6 Identification of Critical Technologies 

It is clear from the trade analysis studies and the description of the 
systems in the IDEA and the Alternate IDEA that there is significant ongoing 
work in most of the technology areas that would relieve NASA of the need for 
further fiscal support. Many of these technologies, such as the VSCF power 
systems, are already highly mature and they have been the beneficiary of 
significant military and company funding. The 270 Vdc system is presently 
without any aircraft implementation, and it is less mature than the VSCF 
cycloconverter and dc link systems. Similarly, the 20 kHz system is immature, 
and significant work Is required to bring the primary power system concept up 
to the technology status of the two VSCF systems. There are technology 
subsets that must be given similar R&D support. The design of the 20 kHz 
power transmission cables, for example, is one such subset. As stated in the 
summary/recommendations in the Power Distribution System Trade Analysis, a 
compendium of cable data for 20 kHz transmission frequencies is required, 
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along with the development of low loss cable configurations* Studies of EMI, 
RFI, are also required, as well as further worx on the complete Integration 
aspects of a 20 kHz power system in an IDEA and Alternate IDEA based 
configurations . 

In assessing these technologies that require future NASA support and fund- 
ing, Lockheed has identified those systems and technologies that are presently 
without substantive background, and/or those systems and technologies that, 
without NASA support, would not be brought to fruition in a reasonable time 
frame. 

3.6.1 Advanced Power Generation Systems ( APGS ) : - The trade analysis on APGS 
has already identified the 20 kHz power system as a candidate for continuing 
NASA support, and this is already being implemented. 

The variable-voltage/ variable frequency system was also identified in the 
summary on the APGS as a system that was without major background and one that 
required significant testing in the laboratories and in aircraft. The VV/VF 
system will not receive in-house funding from the major electrical suppliers 
because most of these companies already have significant investment in alter- 
native APGS approaches that they believe to be competitive with the VV/VF. 

The VV/VF power system is the selected system for aircraft such as the IDEA 
and Alternate IDEA that have large capacity electric systems, but for impl 2 - 
mentation it would be necessary for NASA and/or the military to generate 
design/hardware programs to bring the technology into maturation by the 1990 
time frame. There are also subsets of this APGS technology that are discussed 
separately below, such as the ECS, that will require further and independent 
development to validate their operation and interface with the VV/VF type 
power systems • 

3.6.2 Emergency Power System Technology . - A more direct subset of the APGS 
technology is the emergency power system that will be required in the 

IDEA/ Alternate IDEA to support the flight critical (FCS type) loads. Here, 
the emergency power sources must be examined beyond the level that was pos- 
sible in the IDEA program to evaluate their efficacy not only from the reli- 
ability standpoint, but also from their availability and technology status. 

It is evident that there are a number of battery configurations, both primary 
and secondary, that would make highly reliable static power sources to provide 
non- interrupt power until an APU comes on line, but many of these have other 
shortcomings: charge difficulties, maintenance problems, logistic support, 

cost . Also, many batteries have a poor watt-hours/ pound characteristic and 
have low upper-temperature tolerance. Some also, on charge, exhibit thermal 
runaway problems. Fuel cells and more exotic batteries could be used, but 
tiU.se must also be examined for maintenance/ reliability logistic support 
aspects. On the basis that the emergency will be a rare occurrence, it is 
possible to consider primary cells with a long shelf life, etc. 

An alternative to the static battery power sources are emergency power 
rnits, EPU8, of the monopropellant or bi-propellant types. The YC14, F15, F4, 
Concorde, and other aircraft use liquid propellant EPUs (hydrazine blend) and 
these have the advantage that these can be long term emergency power sources, 
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provided adequate fuel capacity is Installed. Again, 1',. is another logistic 
support item (requiring a different type fuel) and it is a somewhat 
sophisticated, costly installation. 

Sam air turbines have the advantage of simplicity. They can also generate 
power down to reasonably low air speeds and are used in a number of aircraft, 
including the Lockheed L-1011. These units can be oi' the drop-out type or can 
be in a ducted configuration. The RATs have few problems other than that the 
power-output on low approach speeds can be low, depending on the propeller 
diameter. For the IDEA, where the flight critical FCS loads require non- 
interrupt power, the RAT would be non-compl iant because it could take 5 to 7 
seconds to come on line. Therefore, a backup power source would still be 
required. 

Two alternative versions of the RAT would be to consider power extraction 
from the bypass fan spool that is normally powered by the engine's low pres- 
sure turbine or a vortex-powered generator configuration. In the case of the 
bypass fan, it would be necessary to evaluate the fan windmilling speed at 
different altitudes and different air speeds. Provided the emergency gen- 
erator is permanently tied into (say) the 270 Vdc emergency power supply, this 
EPS could then provide continuous on-line power and therefore meet the 
noninterrupt power criterion. These turbines could drive generators that 
normally support the primary power system and they could also serve as backup 
to the main engine driven generators, should these fail. Again, the vortex 
turbine driven generators could provide noninterrupt power, as with the bypass 
fan driven generator EPS. 

Reviewing the above EPS sources, the monopropellant powered systems are 
now in production and require no NASA support. Conventional batteries such as 
lead acid, nickel- cadmium, silver-zinc are now in the market-place. The lead 
acid type is more free of the problems of charging/high cost, etc., but they 
have low specific output of 8-12 Wh/lb. NASA is therefore urged to pursue the 
development of more exotic batteries with chemical couples that could provide 
much higher energy output/lb. Such a program would benefit the space programs 
as well as the conventional aircraft programs. Continuously fed fuel-cells, 
such as the solid polymer electrolyte membranes, and advanced versions of the 
lithium-chloride batteries using hydrogen peroxide cs an oxidant could be 
studied further. Batteries such as lithium sulphur can be projected with 
maximum theoretical energy densities of 1,300 Wh/lb. Automobile electric- 
traction systems and air-vehicles would all benefit from a breakthrough in 
battery technology. Batteries such as the lithium-chloride type with 
consumable electrodes could become a practical and viable emergency power 
source for the aircraft application. 

Another EPS, not given much attention, but which could be another candi- 
date for NASA consideration, is a stored mechanical energy power system. A 
high-energy fly-wheel of low volume and high mass could be electrically 
powered up to speed by an ac motor/generator and, once up to speed with the 
requisite stored energy the fly wheel could be kept at speed with "topping- 
power" only from the motor. In the event of an all engine out, and complete 
loss of primary power, the motor would revert to a "generator-mode" and supply 
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emergency power for some time, dependent on the kW demand and the energy 
capacity of the flywheel* A stored energy system of this type could be better 
than IS Wh/lb and have better performance than a lead-acid battery; however, 
if It had to be continuously running for the mission (to provide non- interrupt 
power) this could be its main disadvantage. 

3. 6. 2.1 Engine starting: This is related to the AFGS only because the 

generators in the IDEA/ Alternate IDEA are used in the dual role of a starter. 
The problems that can be cited against this present proposed method of elec- 
tric engine starting, derive from two aspects. 

(1) The capacity of the power electronics for starting 40,000 pounds SLS 
rated engines can be in excess of 200 kU. 

(2) This power cannot be supplied at the gates of most air terminals 
around the world. The power is also high in relation to the onboard 
APUs . 

Because of these problems and the fact that the power electronic assem- 
blies have very limited electrothermal capacity, it is recommended that NASA 
explore alternative methods of electric engine starting that would permit the 
power electronics to be eliminated from the start cycle, <r their power 
capacity significantly reduced. A corcllary to this is that the ilternative 
engine start technology reduce the electric power demand reflected to the APU 
and external power system. Without such technology, it would be necessary to 
rely upon APU starts only, since it would not be possible to upgrade the 
capacity of the electric power supplies at the main airport terminals, in the 
stipulated 1990 time frames. 

3.6.3 Ground Power Support of IDEA . - Because of the large engine starting 
and ECs power demands, the technology support for an IDEA in the 1990 time 
frame could be as critical for its Impact on the ground power systems (at 
world air terminals) as the systems are upon the design of the airplane 
itself. Attention must therefore be given to this critical issue and the 
appropriate agency (e.g., the Aviation Industry Working Group comprising 
representatives from A1A, ATA, ICAO, and 1ATA) should ensure that equally 
aggressive development programs are put in place to upgrade the capacity of 
ground electrical power supplies at the air terminals throughout the world. 

The airlines presently have tremendous Investments in conditioned air and 
pressurized air ground systems at all main air terminals, to support the 
pneumatic starting and air cycle air conditioning systems now in the current 
commercial aircraft. It is axiomatic that without the concomitant development 
of larger ground electric power systems, the successful Integration of the 
future IDEA type vehicles into viable airline operations could be frustrated 
by the lack of suitable external power supplies. 

Airports will be faced with the problem as to whether to select one or 
more of the following: 



(1) Centralized three phase 200 V 400 Hz installation in each airline 
terminal. This in turn will break down into two other choices: 
whether the 400 Hz power be transmitted at 200 V, or at high tension 
voltage. For voltage drop reasons, the latter is preferable, so step 
up transformers would be required at the central power station and 
step down transformers at the satellites. 

(2) Distributed three-phase 60 Hz power, where power conditioning 

(conversion to three-phase 200 V 400 Hz) is accomplished at the 
satellite: this can be described as a distributed processing (or 

power conditioning) approach. Again, in this choice, a substation at 
each airline (or each airport) might distribute three-phase 400 V 60 
Hz power, or high tension three-phase 60 Hz power (at say 6,000 V) 
might be transmitted from the substation to the satellite. 

(3) A third issue is whether motor generator sets or static power 
conditioning is accomplished at the satellites. 

(4) Dedicated diesel-driven or other self-contained ground power units 
located (one or two) per satellite to serve a number of gates (at the 
satellite) . 

There is clearly more flexibility with separate dedicated GPUs (ground 
power units) and it is likely that the costs, compared to major fixed plant 
facilities, could be much less. In addition, the R01 and the amortization 
schedules of the portable GPUs could be much shorter (than centralized fixed 
installations) . 


3.7 Plans and Resources for Power Generation Technology Readiness 

Estimates of the schedule and costs are shown in figure 44 ft development 
of engine-driven generators. Reaching technology readiness will involve the 
participation of hardware suppliers working with those responsible for 
integrating systems into the aircraft (usually the airframe manufacturer). 

For advanced engine start methodology the schedule is shown in figure 45. 
This is required for development of new starting methods which will reduce 
ground power requirements. Technical resources will include APU suppliers and 
aerospace electrical suppliers. Coordination with engine manufacturers will 
be necessary for the supply of engine data, together with the role of the 
airframe manufacturer as systems integrator. 

Emergency power (figure 46), requires the resources of electrical 
suppliers, the chemical Industry and battery suppliers, and airframe companies 
for systems integration. 

The implementation of ground power support equipment (figure 47) uill 
require ongoing collaboration between airframe manufacturers, airport 
operators, and regulatory agencies. 




















































4. POWER DISTRIBUTION SYSTEM 


f . - 


The power distribution system in a modern aircraft is one of the key 
systems inasmuch as it determines the layout and routing of the generator 
power supply feeders, the distribution feeders, and the distribution of the 
utilization wiring. Typically, the aircraft electrical designer starts with a 
gross assessment of the electrical load in the aircraft then he assigns 
various load distribution zones whose locations are determined by any pro- 
jected major confluences of wiring, e.g., the wing roots, the flight station, 
the empennage, power plants, or wheel-wells. Power and load management areas 
are located since these will determine the necessity for and number of main 
electric load centers (MELCs) . These load centers will typically accommodate 
all the power contactors, voltage-regulators, supervisory panels, engine 
control/monJ'oring equipment, insulated/ isolated bus-boxes (containing bus-tie 
contactors, bus contactors, bus transfer inter-ties), and large numbers of 
rack-mounted load relays and power circuit breakers. Finally, the control 
center for the total electric system is selected. This usually is the flight 
station in the large airplane and the cockpit in the military aircraft. 

At important design aspect of the power distribution system xs the tech- 
nology and methodology of the protection system for the power genera, .on 
system, the power supply feeders, the distribution feeders, and the utiliza- 
tion wiring. In most modern aircraft load protection is furnished by electro- 
thermal circuit breakers of the trip-free type, which are circuit-breakers 
that cannot be overridden when they are in a tripped state. In some aircraft, 
"current limiters" were used which were high rupturing capacity fuses of the 
"slow-blow" type that protected the distribution feeders and allowed protec- 
tion coordination with load circuit breakers located downstream at various 
remote lead centers (RLCs) . The primary shortcoming of this type of protec- 
tion methodology was that the remotely located circuit breakers which provided 
the necessary protection of the load wiring against smoke/ fire hazards 
required manual reset, so physical access to the circuit breakers was nec- 
essary. This access was often difficult and, in some cases, impossible. As a 
result, such remotely located circuit breakers could only be used in the low 
priority load circuits. Implicity, all other circuit breakers for the control 
and power wiring of all loads, other than the low priority circuits had to be 
in the flight station. As a consequence the flight station in aircraft such 
as the L-1011, C-141, C-5, DC-10, and 747, became cluttered with more than 
1000 control and power circuit breakers. 

Power supply wiring, the large gage feeders between the power plant 
located generators and the MELCS, requires special consideration and protec- 
tion treatment. This usually involves the employment of differential zone- 
type protection so current transformers are located at the "sending end" of 
the power feeders near the generator terminals and an equivalent set are 
located at the "receiving end" of the power cables where they enter the MELCs. 
Since these CTs monitor the current at both ends, it is possible to compare 
the currents at the "sending" and "receiving" ends of the cables and initiate 
a generator-trip when any difference current is detected. For aircraft safety 
reasons, the de-energlzlrg of the zone- pro tec ted feeders is accomplished in 
the shortest possible time and typically in less than 25 milllsecs. The 
motivation for the trip times derives from the concern that cable shorts can 
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create sparking conditions in the power plant plants and/or wings, where the 
possibility of flammable vapors exists* In addition to the zone-protection 
CTs , other CTs are used for flight station/ cockpit instrumentation/ indicators 
and for the generator protection/supervisory panel, etc. 


4.1 Power Distribution Systems Alternatives 

The power distribution systems alternatives considered for the IDEA 
configuration are: 

• Radial Distribution 

• Distributed Bus 

- Common Duplicated Ring Bus 

- Separate Duplicated Ring Bus 
Duplicated Selected Radial 

- Hybrid Ring/Distributed Bus 

4.1.1 Radial Distribution * - One of the requirements in this study is to 
evaluate alternative power distribution systems for the application in the 
IDEA and Alternate IDEA. The Baseline itself is considered to be a conven- 
tional radial distribution of the type described above. These types of 
systems can be schematically illustrated by figures 48 and 49, which simply 
define the routing of the power supply and distribution feeders from the 
generators to the RLCs in a two-engined airplane. In figure 48, a main 
electric load center (MELC) is assumed to be located in the flight station/ 
cockpit area and the power feeders from the Nos. 1 and 2 engine driven 
generators are taken directly to the flight station (F3). Differential- 
protect:. a is used for these power feeders. 

At the flight station, two isolated buses are established. In an 
emergency, they can be connected by the bus tie contactor, BT1 : flight 

station loads, FSL, are connected to the buses. From the MELC distribution 
feeders are routed to RLCs at the: 

• Left wing root area 

• Right wing root area 

• Empennage 

Protection of the distribution feeders is by high rupturing capacity fuses 
but electrothermal units could also be used. Single-wire distribution is 
used, bv L in the case of a three-phase ac system there might be one or more 
wires per phase. At each of the RLCs, a large number of load wires will 
supply the left wing loads (LWL); the right wing loads (RWL); the FS loads 
(FSL); and the tail loads (TL) . Protection for this load wiring will usually 
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Figure 48. - Power distribution 

systems: radial (flight 

station load center). 



SIMPLE RADIAL 
(MAIN LOAD CENTER) 

Figure 49. - Power distribution 

systems: radial (main 

load center) . 


be electrothermal or electromagnetic circuit breakers since access to such 
circuit breakers is not necessary in flight. While not shown in the schematic, 
significant amounts of electric/electronic equipment, and relays/contactors, 
will also be located in the MELC. Where the power supply is alternating 
current, step down transformers power the low voltage loads, such as lighting 
as well as the transformer-rectifier units that furnish 28 Vdc power. 

Figure 49 is a simple variant of figure 48 and it is still a two-engine 
radial distribution system with the following basic differences: 

• The MELC is centrally located near the wing root. 

• Protected feeder system is used in the RLCs. 

Shown as a dc rather than an ac system, three-phase wires are used to 
supply power to each RLC and each of these wires is protected at the sending 
end by current limiters or circuit breakers. As before, load wires distribute 
from the MELC and the RLC to the wing and fuselage loads. These load wires 
are protected by the typical trip free circuit breakers. 
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4.1.2 Ring and Distributed Bus Systems . - By definition, a distribute d-bu6 
system is differentiated from a radial-system because subbuses and/or indi- 
vidual loads may be tapped into the distributed bus as it traverses the air- 
craft. As indicated In the overview to this discussion on power 
distribution/protection methodology, radial power systems have the problem 
that a very large number of loads are powered over many wires emanating 
radially from the MELC and/or the RLCs. The proliferation of wiring and the 
unusually large number of circuit breakers are, therefore, cited as the 
disadvantages of the radial type distribution system. 

Two aspects attract consideration of the distributed bus concept: 

(1) The large increase in the number of loads in the wings and 
wheel-wells in the IDEA and Alternate IDEA airplanes. 

(2) Solid state power controllers (SSPCs) and remote power controllers 
and (RPC8) make possible locating the controllers in close proximity 
to the loads. This eliminates the need for locating all the 
contactors/ relays/SSPCs in a centralized fuselage location. It also 
eliminates the weight penalty of using a large number of 

load- dedicated wires that are much longer in length than wires tapped 
from the distributed bus to the loads. 

Implicit in the above is the fact that each SSPC, RPC be they fully 
solid-state or hybrid, combines the features of a circuit breaker and con- 
tactor relay. More Importantly, it is implicit that such control/protection 
devices are of the automatic trip type that can be reset from the flight 
station or automatically by the load management system (with appropriate 
monitoring by the crew). 

Ring and combination ring/ distributed bus systems constitute a basic 
departure from the radial and the radial/distributed bus system in that power 
from the generators ties directly into the ring distribution system so the 
feeders are not taken into one or more MELCs in the fuselage. This means that 
the zone of differential-protection is shortened for the generator/power 
supply feeder system, but such protection will be retained for these alterna- 
tive approaches to power distribution. However, in the IDEA and all-electric 
aircraft in general, a different focus may be given to the protection 
methodology for the generators and power feeders in these aircraft. For 
example, the most prevalent faults in conventional aircraft power systems are 
line-to-ground faults, which give rise to very high and sometimes destructive 
fault currents. These fault currents may be typically limited by the 
Impedance of the fault, the Impedance of the line and the source impedance of 
the generator. A full analysis of symmetrical and asymmetrical fault currents 
in an electric system is beyond the scope of this study as it involves a 
definition of the positive, negative and zero sequence values of the cables 
and generators. Also, the amplitude of these fault currents are affected by 
the per phase cable groupings, their number/conf iguratlon and their stand-off 
clearance from aircraft structure. Of interest here is the fact that these 
standoff distance parameters are more pertinent to aircraft using conventional 
aluminum, or advanced metallic structures, such as the lithium alloys, rather 
than composite structures. Clearly, the latter will involve a different 
computer modeling of the generators with their feeder dlstribu.ion systems. 
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In addition to the line- to-ground faults, there is the problem of 
incipient line-to-line fault and, while these have a lower statistical pros- 
pect than line- to-ground faults, they must nonetheless be considered. Also, 
unlike the line-to-ground faults, the line-to-line faults are more likely to 
occur at equipment terminations rather than in a run of cable. Therefore, 
very careful attention must be paid to the method of cable terminations and 
their interface with contactors, relays, SSPCs/RPCs and other equipment/ 
component assemblies. Unfortunately, in many aircraft electrical installa- 
tions phase-barriers between cable lugs/ terminal ions have been inadequate or 
of poor design and insuf f icient-torquing of the studs or screws has resulted 
in vibration causing the terminations to loosen. The result of this is that 
the termination contact-resistance has increased to a point that the ensuing 
heat generation caused carbon-tracking across the plastics and, later a 
problem of line-to-line shorts led to severe arcing and fire hazard. The 
prospects of line-to-line fault must, therefore, be addressed at the equipment 
terminations with due recognition of the problems involved. Also they must be 
given special attention in the IDEA, since this aircraft will clearly be more 
dependent upon the reliability and integrity of the generator/feeder wire 
distribution system. 

The paralleled system exacerbates the rupturing current problems for the 
switch-gear and other protective devices as do large, stiff aircraft power 
systems; as a consequence, the fault currents might be in the range of 5000 to 
15,000 amperes. For the nonparalleled system, the line-to-ground fault 
currents might be approximately a maximum of 700 to 1250 amps. For the IDEA, 
the utilization of higher voltages, such as a three-phase 400 V system, would 
reduce these currents by approximately 50 percent. 

In aircraft power systems fault currents are also a direct function of the 
ceiling voltage on the generator and its electrical stiffness relative to 
short circuit conditions. Therefore, with permanent magnet generators the 
transient maximum fault current amplitude will (in the VSCF type power system) 
be controlled by the current limiting control technology in the converters/ 
inverters. In the 270 Vdc systems the phase delay rectifiers will control 
the fault currents typically the phase angle on the SCR s will fully advance on 
short-circuit and create a short-time overvoltage/overcurrent condition. In 
the variable voltage/ variable frequency system the voltage will not increase, 
and will actually decrease as a function of the cross (demagnetizing) 
ampere-turns and the machine/cable reactances. For wound rotor machines the 
peak fault-currents will be a function of the maximum excitation that can be 
impressed upon the generator rotating field system. 

It is clear that several factors alfect the amplitude of the fault 
currents in aircraft power systems and these, in turn, affect the sizing of 
the power supply/ distr ibut ion feeders. The objectives are to reduce the 
prospective fault currents and to ameliorate the switchgear problems. Beyond 
this, it is possible to consider ungrounding generator neutrals and allowing 
them to float. Alternatively, the neutrals could be grounded through high 
impedance relays that could serve the dual purpose of limiting the line-to- 
ground faults to a matter of milliamps and providing a ground fault warning 
signal to the power management system at the same time. 
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4.1.2. 1 Common duplicated ring bus: This sys .em is shown schematically in 

figure 50. It consists of two complete common distributed ring buses, which 
are tied or isolated at their extremities by section contactors. All 
contactors are normally closed except flight station and tail contactors and 
are under control of the microprocessor which is a part of the power 
management system. For example, on the ground both of the duplicated ring 
buses can be formed into two complete rings In which either or both ring buses 
can be powered up from the APU or the external power supply. Again, the 
nomenclature is as before. 


FSL 

LWL 

RWL 

EL: 


LSE1/LSB2: 
RSB1/RSB2: 
TSB1/TSB2: 
FSSB] /FSJB2: 


Flight Station Loads 
Left Wing Loads 
Right Wing Loads 
Empennage Loads 
Left Section Breaks 1 and 2 
Right Section Breaks 1 and 2 
Tail Section Breaks 1 and 2 
Flight Station Section Breaks 


and 2 


During normal flight operation the wing section breaks are closed and the 
flight station/ tail section breaks are open. Therefore, as shown, the No. 1 
generator supplies the left wing and left fuselage buses while the No. 2 gen- 
erator supplies right wing and right fuselage buses. 


In the event of a No. 1 engine or No. 1 generator failure the section 
breaks remain as before, except that the flight station section breaks (FSSB1 
and FSSB2) and the tail section breaks (TSB1 and TSB2) close. At this time 
both distributed ring buses are complete rings and are supplied by the No. 2 
generator. Clearly, this latter situation is the same in the event of a 
failure of the No. 2 engine or generator except that both ring buses are then 
supplied by the No. 1 generator. All loads may be conveniently tapped into 
the distributed ring buses as they traverse the periphery of the aircraft. 
Unlike the radial system, the load power wires are short and direct; however, 
it is important that the integrity and reliability of the distributed ring 
buses be of the highest order. Therefore, since any short circuits in the 
load wires pose a threat to the buses, it is essential that protection for 
each load wire be effected as close to the bus as possible. Also, as 
highlighted earlier, it is necessary that the number of breaks and 
terminations be a minimum. 


4. 1,2. 2 Separate duplicated ring bus: This distributed ring bus system is 

of the same genealogy as the common duplicated ring bus system, except it 
falls more precisely into the definition of a ring bus system. This is shown 
more clearly by figure 51 where it can be seen that two closed rings are 
provided on each wing and two closed distributed rings are used in the 
fuselage. The system is also simpler and uses fewer section break contactors. 
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Operationally, the separate duplicated ring system is not much different 
from the common duplicated ring bus system. The No. 1 generator supplies the 
left outer wing bus, the fuselage outer bus, and right wing outer bus via BT1. 
Conversely, the No. 2 generator supplies the right wing inner ring bus, the 
left wing inner ring bus via BT2, and the fuselage inner ring bus. 

In the event of a failure of generator 1 or 2 bus ties BT1 and BT2 close 
to permit the remaining generator to supply both fuselage buses and both wing 
buses • 

4. 1.2.3 Duplicated selected radial: This is a straightforward radial power 

distribution system that offers the advantage of a distributed bus system and 
provides dual-redundant power feeders in the wings and fuselage. The sche- 
matic configuration is shown in figure 52, where the dual redundant feeders 
are provided at the source-end in a split MELC having two insulated/ isolated 
source buses. Each of the source buses is selectively switchable to the other 
bus, under the power management processor control, and all feeders emanating 
from the buses are protected with fuses or circuit breakers. The aspect of 
selectability is carried through into the wings and fuselage where local buses 
(or individual loads) can be connected to either of the radial distributed 
buses • 

In this type of system, certain low priority loads are permanently 
connected to one or other distributed radial bus and provide switchability 
only for the high priority loads, either individually or by a sub (essential) 
bus. The only time the high priority loads would have additional power source 
access is where there is a failure of one or the other distributed bus to 
ground. As can be noted from figure 52, if there is only a failure of an 
engine or a generator, the source bus in the MELC is transferred via a 
double-throw power contactor to the other source bus. Notwithstanding this 
advantage that accrues also to the low priority loads, a load hierarchial 
structure is set up for all the loads in the aircraft. All loads are assigned 
different levels of prioritization and will be disconnected from the electric 
power system in case of an emergency, in accord with their priority status. 

The duplicated selected radial is a simpler system from the standpoint of 
routing the redundant power feeders in the aircraft, but it engenders more 
complexity than the "connectable” ring systems since there is a proliferation 
of load and/or bus switching in the wings and fuselage. 

4. 1.2. 4 Hybrid ring/ distributed bus: This system is shown schematically in 

figure 53. As in all hybrid systems, the intent is to combine the features 
and advantages of the two types of power distribution concepts. 

As shown, duplicated ring buses are provided in each wing and four iso- 
lated, redundant, distributed buses are provided in tb^ fuselage. Another 
notable difference is that a three-engine airplane configuration and the 
interface with the APU and external power Is shown. 

The design layout of the hybrid r ing/di^tr ibuted bus system follows the 
practice of the previously described two-engine systems, however, as there 
are two generators per power plant, it is possible for the each ring In each 
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FSEL 



DUPLICATED SELECTED RADIAL 
DISTRIBUTED BUS 


LEGEND 

LWEL: LEFT WING ESSENTIAL 
LOADS 

LWL: L. WING LOADS 
RWEL: RIGHT WING ESSENTIAL 
LOADS 

RWL: R. WING LOADS 
FSEL: FLT. STN. ESS. LOADS 
FEL: FUS. ESS. LOADS 
EEL: EMPENNAGE ESS. LOAO 
EL: EMPENNAGE LOADS 


Figure 52. - Power distribution systems: duplicated selected radial. 
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Figure 53. * Power distribution system: ring main (three engine airplane). 
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wing to have the luxury of being powered by its ov: generator or either 
generator can power both buses in the event of fa'.' »re of the other, e.g., 
contactor Cl-2 can tie the duplicated rings in the left wing* Another feature 
is tliat the outer rings of each wing are also powering the outer pair of 
distributed feeders (1 and 2) in the fuselage, whi.e the other two fuselage 
distributed feeders 3 and 4 are powered from generators 3 and 4 via contactors 
C3 and C4, respectively. Further, it cz \ be seen that the outer ring (powered 
by say No. 1 generator) is a backup (via BT2) for the No. 2 fuselage 
distributed bus in the event that the No. 3 generator fails. Note that No. 3 
generator normally powers the No. 2 distributed bus via contactor C3. This 
modus operandi is symmetrical on the right side with the left side inasmuch as 
the configuration of the right wing duplicated rings and the empennage-located 
No. 4 generator mirror the left side. 

Figure 53 system again enjoys a basic simplicity in that it is relatively 
uncomplicated system, despite the fact that it is a 3 engine/6 generator 
configuration. Also the system provides separate, isolated, quad redundant 
feeders in the fuselage. This quad redundancy is considered essential in the 
IDEA because quad redundant electric actuators and quad redundant FCS digital 
computers are required for the flying tail (the horizontal stabilizer). 

Interface of the APU/external power systems is also simple in that the 
fuselage feeder configuration is selectable to the APU or external power and 
it feeds into the center top point of bus ties, BT5 and BT6. With this simple 
arrangement it is possible for one single power source to power every bus 
(ring and distributed) in the airplane. Implicitly, this same operation is 
possible in flight, when the APU or any one of the six generators can also 
power all or any combination buses. The control of the section breaks and 
contactors will, of course, come under the purview of the power management 
system • 

4.1.3 Weight assessment . - This weight assessment is made on the 3-engine/ 
6-generator type systems that will be used in the IDEA and Alternate IDEA 
airplanes. A comparison of the weight of the systems in these two all 
electric aircraft with the Baseline system is, as stated, not meaningful since 
the power distribution capacities are completely different. However, the 
weights of the proposed power distribution are discussed below, based on the 
predicted capacities of the generation systems in each aircraft. 

Baseline 3 x 90/120 kVA 

IDEA 6 x 150/200 kVA 

Alternate IDEA 6 x 220/275 kVA 

The hybrid system of the figure 53 configuration is used for the weight 
assessment, with distributed ring buses in each wing and quad redundant 
distributed feeders in the fuselage. Figure 54 is illustrative of the lengths 
of the power feeders in each wing and the fuselage. 

Weights of the distribution feeders are premised on maintaining the same 
size conductor throughout the airplane, even though it would be possible at 
certain routing points to downsize the cross section of the power feeders. 
This, however, would require more breaks and terminations at those points 
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Figure 54. - Feeder length/ impedance diagram. 


vhere the wire gage changes were made. The weight advantage of doing this is 
considered marginal and less attractive relative to the objective of achieving 
high reliability in the transmission system. The other sizing criterion is 
that every feeder be sized for the base-rating of the generator and not the 
higher slash-rating. The rationale for this is that only one generator can 
supply a feeder section at a time, and in the event of overloads, advantage 
can be taken of the inherent overload capacity of the cables 1 high temperature 
insulation system. Thus, it is projected, with the infrequent prospect of 
this occurrence, that the impact on the insulation life of the cable 
insulation system will be insignificant. 


With the above premises the cable rating of the three-phase 400 V 150 kVA 
system in the IDEA airplane will be: 

1 - kVA x 10 3 - 150 x 10 3 - 216A 

3 x V 3 x 400 


Cable Data: 


Select 0 gage 

Weight 378 lb/1000 ft 

Resis. 0.114 ohms /1000 ft 

Wire Dla 0.525 in 
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Cable Lengths ; 
Wings: 

F uselage : 


Empennage : 


See Figure 47 


Cable Length/Wing: * [30+2(50)+12+l 5]x2-314 

Cable/2 Wings: - 2x314x3* »1884 ft 


Cable/Fuselage Side - 

Cable/Fuselage 

(2 sides) - 


APU Feeders 


20+(2xl30)-280 ft 
2x260x3* -1560 ft 

(70+2(12)] x3*-282 ft 


Aircraft Power/Dlstrlbution Feeders 

Total Length: L c - 1884 '+1560 '+282 '-3726 ft 

Total Cable Weight: 


W - 3726x378x 10 _3 -1408 lb 

c 


* Three-phase cables. 

4.1.4 Feeder voltage drop . - It is appropriate to comment on whether the wire 
gages used in the foregoing calculations are volts drop limited or current 
limited. It is always possible to find a wire gage that is adequate for the 
current, but the wire gage in long-line transmission systems may have to 
Increase over the gage necessary to carry the current because of voltage drop 
considerations. Also the dc resistance of the wire has been used *ather than 
its ac Impedance, which is affected by the cable resistance and react*- ce at 
the transmission frequency of interest. The cable therefore has a power 
factor and it tends to be lower as the frequency increases - 

Using the dc resistance values in the previous calculations, the following 
voltage drops would be appropriate the 100 feet of wirs carrying the wires 
rated current . 



kVA 

Rtd 

Amps 

250 

Wire 

Gage 

Wire 

Res Is/ 1,000 ft 

Wire 

Voltage Drop/100 ft 

Basel l^e: 

90 

00 

0.09 

2.25 

IDEA: 

150 

208 

0 

0.114 

2.37 

Alternate IDEA: 

220 

305 

2x1 

0.146 

2.22 


2 


Considering only the IR drop value, it is clear that none of the above 
cables is voltage drop limited since they are well within the permitted 5 
percent volt drop limit of typical three-phase ac systems. For example, the 
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conventional three-phase 200 V 400 Hz generator transmits 20R V at the 
terminals allowing an approximate 4 percent line voltage drop. Also for a 
nominal 400 V system the generator would have a terminal voltage of 416 V 
approximately. A significant advantage of the higher voltage system is that 
it allows the cable impedance to increase as a square of the voltage ratio for 
the same percent voltage drop. Figure 55 is illustrative of the impact of 
voltage drop on cable sizing. Tt shows the sensitivity of the lower gage 
wires to cable rating vs distance for a permissible 4 V drop. Note that the 
current rated value of 9 A for a 22 gage cable can only be carried for a 
distance of 27 feet. Therefore, if a run of 100 feet were involved, it would 
be necessary for a higher gage cable to be selected. Cable size is determined 
by selecting the first cable gage line below the intersection of the projec- 
tions of the desired current capacity and distance values. Reference to 
Figure 55 shows that, for the present example, a lb gage cable would be 
required. This emphasizes the penalty in using radial type power systems. 

Tf cable impedance rather than just TR drop is taken into account, the 
appropriate vectorial impedance voltage drop must be considered in accordance 
with figure 56. This vector diagram, is based on the following formula: 

Voltage Drop, RF=TR cos 6 + TX sin 6 + (IX cos 6 - TR sin fc ) ? 7?V 

Figure 56a illustrates the typical cable drop as derived from the above 
formula. Simply, the sending end (line) voltage Is OA ana the receiving end 
voltage is hr. The voltage drop that is calculated is OR - OR - RR - RT): RO 

now consists of in-phase components RC and CO (where RC * RF cos 0 aj^d CO * AF 
sin0 : the small component OK is given by the (IX cos 0 - IR sin0 )'/2V part 

of the expression. The values of figures 56b and 56c are that they illustrate 
the impact of the load power factor upon the cable voltage drop. Figure 56b 
shows that if the line current T lags by a large angle (low power factor), 
the IX component is significant in reducing the receiving end voltage V^; 
however in figure 56c, where the phase displacement is smaller, the TX 
component has marginal effect, hut the TR component is (relatively) more 
effective in reducing . Therefore, based on the generalization inherent in 
figures 56a and 56h, it can be said that considering the large gage cables in 
the TDEA and Alternate TDEA, the cables are unlikely to be volts-drop limited. 

Tt is recognized that it is the cable inductance, as a function of 
frequency, that is pertinent. In this regard, the following formula relates 
the cable inductance versus other variables. 

Inductance, L- 0.1401 lo* / -^1— \ ( in milllhenrles/lOOO f t) (4-1) 

yon / 


where 

2301 is a factor for a 19 strand conductor 
T1 Is spacing between conductors (in inches) 
CM is circular mil area of conductor 
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Since the cable reactance, X^ * 2 tt £L, the expression becomes: 
^ - 2 tt f x 0.1401 log 1Q ohms/1000 ft 


or, for 400 Hz 


Xj^ - 0.352 1 og, q ohms/1000 ft 

In most tables showing cable data it is possible to select cable sizes 
based on their current carrying and to determine whether such cables are 
assessed as having a “free air" or "bundle" rating. The tables also show the 
physical data on cables such as their specific weight (lb/1000 ft), 
conduct or- diameter and finished-wire diameter. More typically, however, the 
cable resistance/1000 feet as shown is the cable's dc resistance, and this is 
inadequate in ac systems where it is necessary to know the Impedance value 
(the R + jX value) for a given frequency, wire grouping configuration and the 
standoff distance from structure. Table 9 is typical of a tabulation of such 
data for 400 Hz system, while figure 57 shows the cable Impedance vs trans- 
mission frequencies up to 4 kHz. Figure 58 further shows the cable power 
factor changes as a ^unction of different gage cables at 400 Hz and 4 kHz. 

It is through the use of such data that more detailed analyses can be made 
of any new cable transmission system in an advanced aircraft. 

A corollary to the consideration of the R + jX effect in ac transmission 
cables is th? Impact of frequency upon "skin-effect." Skin effect is a 
phenomenon in ac systems, where the current tends to confine itself to the 
outer periphery of the conductor. It is an effect which increases as the 
frequency increases. The formula that relates the significant variable is 
given below. 


Skin Effect X = 2 a 

where a = conductor radius (cm) 

f » frequency (Hz) 

H- * permeability 
P = resistivity (ab ohm-cm) 

X * factor defined in figure 59 

The physical and practical aspect of skin effect is that it increases the 
”R" value of the R + jX impedance because the effective cross-sectional area 
is parasit ically decreased. Therefore, it can be seen that high frequencies 
will exacerbate the skin-effect and increase the losses in the transmission 
cable, unless special precautions are taken. However, more practically, and 
for the more typical aircraft frequencies, it is possible to decrease the skin 
effect by using smaller gage wires, since the large gage conductors tend to 
exhibit higher reactance in the inner core and so the current tends to crowd 
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TABLE 9. “ POSITIVE SEQUENCE IMPEDANCE FOR EQUILATERAL CONFIGURATION 


Wire Size 
(MIL-W-5086) 

Impedance in 

Ohms per 1000 ft. 

Min. Elevation* 

Six Inch Elevation* 

AN-0 

0.106+ j0. 182 

0.101+ j0. 185 

AN-2 

0. 165+ JO. 192 

0.158+J0.195 

AN-4 

0.262+J0.201 

0.256+ jO. 201 

AN-6 

0.413+J0.218 

0.409+j0.220 

AN-10 

1 .018+ jO. 227 

1 .014+ jO. 227 

AN- 1 4 

2. 507+ jO. 260 

2. 503+J0.263 

AN-18 

5.531+J0.286 

5. 529+ JO. 286 

AL-0 

0.165+j0.l92 

0 . 1 58+j0 . 1 96 

AL-2 

0.255+j0. 198 

0.253+ jO. 202 


♦Elevation of three conductors above aircraft skin 


its outer elements of the conductor. The cable ac resistance is related by 
the formula 

r ac ■ k Sc (4 ‘ 4) 


Where 


R is the ac resistance of the cable 
AC 

R^£ is the cable’s dc resistance, (obtained from Tables) 

k is the skin effect ratio as related to X by curves such as 
figure 59 


Another aspect of the ac cable evaluation is the cable power-factor 
effect. Here again the larger cables are adversely affected as a function of 
frequency inasmuch as the cable power factor is lower for the larger size 
conductors. This effect is shown in figure 58, where for example at 400 Hz, a 
#10 gage wire has a power factor compared to an #0 gage cable with a power 
factor of about 0.42. 
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IMPEDANCE, OHMS PER 1000 FT 





Figure 57. - Cable impedance vs frequency. (Courtesy AiRe6earch) 



POWER FACTOR OF CABLE 

Figure 58. - Cable impedance power factor at 400 Hz and 4 kHz for 
various cable sizes. (Courtesy AiResearch) . 









X- FACTOR 


Figure 59. - Skin effect ratio, K-factor va X-factor 
(Courtesy AiRe search) 


‘ * 












4.2 Distribution System Analysis: Preferred System 

From the foregoing discussion and evaluation of aircraft type pcwer/feeder 
distribution systems, the following summary can be made: 

(1) The ring type distributed bus system (Figure 53) appears to have 
significant merit for the IDEA/ Alternate IDEA type airplanes. 

(2) There are many possible variants of the ring type (and distributed 
radial) type systems. The proliferation of loads in the wings of the 
IDEA render the conventional radial systems with dedicated MELCs less 
favorable. 


4.3 Plans And Resources For Technology Readiness 

NASA is advised to pursue the development of distributed bus systems and 
to address particularly the development of modular assemblies that could 
combine load wire protection elements; these are protection modules that would 
preserve the reliability and integrity of the distributed bus system. 

NASA should encourage the development of novel bus interface devices that 
could tap the distributed cables without breaking and terminating the cables. 

NASA Is advised that a more detailed analysis is required to address the 
problems highlighted in this section, namely, cable impedance, skin effect, 
cable power factor, cable groupings. 

A new study is required to develop a compendium of cable data, pursuant to 
the Interest in higher transmission frequencies and higher system power 
capacities. Multiple tables should be generated to give the R + jX values for 
different gage cables at different frequencies; also curves and diagrams 
should be developed to define the cable PF, K and X ratios, and other data. 

NASA should, if high frequency power transmission at 20 kHz is projected, 
solicit cable manufacturers’ participation in the development of special high 
frequency/low-loss transmission cables (coax, flat cable, concentric layer). 

NASA is advised that the complexity of the power supply system is 
adversely affected by the number of types of systems that have to be 
distributed, e.g. f three-phase 200 V/400 Hz, 400 V/800 Hz (or other ac type), 
270 Vdc power, 28 Vdc, high frequency ac power and special voltages for 
digital electronics power viz 5 V, jl2 V, +15 V, etc. 

Ideally, one type of power from which all equipment might derive their 
unique power requirements is highly attractive when quad redundancy has also 
to be provided in the cable distribution system. 



5. DIGITAL POWER CONTROL AND DATA DISTRIBUTION 




5.1 Digital Power Control Background 

With the advent of digital logic, integrated analog circuits and solid 
state power switching, new concepts were developed to handle greater demands 
for more power and more precise control of that power. The conventional power 
distribution/ control system is severely limited by hard wiring and electro- 
mechanical switching techniques. Control logic, load switching, and circuit 
protection are performed via manually actuated switches with control relays 
and auxiliary contacts, power relays/ contactors, and manually reset circuit 
breakers. With the exceptions of design improvements and a few special 
function packages, neither the basic concepts nor the application of these 
devices have changed in several aircraft generations* 

One of the earliest of the new concepts for aircraft electric systems was 
designated "Solid State Electric Logic" (SOSTEL). The basic philosophy of 
SOSTEL was to minimize the number of power devices and the length of the power 
path resulting in the maximum system efficiency. 

To minimize the power devices only one power controller is used between 
the bus and the load* The power controller provides the circuit protection as 
well as the load-control switching. Low level signals from the control logic 
are used to control the power controllers. The control logic functions are 
performed by microelectronic logic networks, providing significant 
improvements in reliability, size and weight. 

Prototype solid state power controllers were developed and have evolved 
through the coordination of the SAE Task Group for Power Controller standards. 
The requirement for the prototypes indicated that some of the devices exceeded 
the technology of the time and the costs of advancing the technology could not 
be justified by the limited aircraft applications. However, by the late 
1970's technology exceeded the needs and, as will be shown later, solid state 
power control is now cost competitive with the simpler thermal and 
electromagnetic components of the conventional approach. In addition, all the 
advantages of the new concepts for power distribution, power/load management 
and control processing and communications can be achieved. 

Control logic methods and system concepts have also continued to evolve. 
There has been very little restraint since the digital technology seems to 
continually exceed the needs and has allowed a much faster evolution. Closely 
following the microelectronic logic implementations, a means to reduce the 
many and lengthy control wires was implemented. This new system provided 
multiplexing between groups of sources, the logic network, and groups of power 
controllers. The next phase expanded the sequential logic of the multiplex 
system to incorporate the control logic functions, providing for computer 
processing and programability of these functions. That implementation was 
designated the "SOSTEL II Data Handling System". 

These early developments continue to form the basis of the new electric 
system concepts. The continuing evolution is directed at cost reduction, 
greater versatility , and reliability improvement. Built- in-test functions have 
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been expanded to cover the system from end to end including the signal sources 
and the power controllers. Fault detections fault tolerance, and self diag- 
nostic Implementations have verified that digital power control can provide 
higher reliability, better maintainability, and lower life cycle cost than the 
conventional approach. 

5.1.1 Power control technology . - The initial concepts of solid state power 
control (SSPC) desired a uniform current limiting action by the power con- 
troller. The quality of the distributed electric power is greatly improved by 
current limiting each load. With inrush and fault currents limited, the sys- 
tem voltage transients are greatly reduced. Current limiting was feasible for 
28 Vdc controllers but slightly impractical when voltage transients and worst 
case conditions were Imposed. For 115 Vac, uniform current limiting was 
barely feasible and totally impractical, considering the high energy 
(500 joules) that would have to be absorbed in worst case. The next stage of 
the SSPC evolution traded off some of the uniformity of current limit by 
shifting a major portion of the energy absorption to a passive component such 
as a wire wound resistor. This approach improved the cost effectiveness of 
the 28 Vdc SSPC, but at 115 Vac the aaditional switching devices and the 
higher energy absorption made such an SSPC barely practical. The evolution of 
the SSPC continued with advances in solid state power devices such as the bulk 
effect current limiter arid the power field effect transistor. 

The bulk effect current limiter is based on well known semiconductor 
physics, in that the charge carriers in a semiconductor experience a limiting 
velocity when subjected to high fields. The saturation of electron velocity 
is an ideal property for a current limiter. The factor necessary to produce a 
practical current limiter is a material with a sufficiently high band gap 
which also has a low saturation field, low net doping level, high breakdown 
field, and can be economically produced. Useable materials include GaAsP, 
AlGaAs, GaSbAs, and ZnO, all of which have high enough band gaps and exhibit 
carrier velocity saturation at fields in the order of 2 kV/cm.^ By net doping 
of these materials in the range of 10 charge carriers per cm , the power 
density becomes low enough to allow use of high field current limiting effects 
without excessive heating. Because the limiting effect is a bulk effect, the 
current limiter does not have hot spot problems such as occur in junction 
current limiters. 

Since this current limit property is found in high band gap materials it 
is possible to operate the current limiter at high temperatures allowing large 
power dissipation per unit size of device. The size of the device is 
restricted only by material processing and packaging problems. Material 
processing has advanced to the point where the velocity saturation mechanism 
can be practically Implemented to produce an economical current limiter. The 
use of this bulk effect current limit would greatly simplify the pow»r and the 
control circuitry. The ac module could use standard SCR technology with its 
well known characteristics and reliability. The BIT circuitry would also be 
simplified as the amount circuitry to check would be reduced. These simplifi- 
cations further improve the reliability and cost effectiveness of the solid 
state power controller. 
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The Power FET has had a rapid expansion in technology and application 
since 1979. Ratings of present devices exceed 1000 volts and can efficiently 
switch over to 300 wattB per device. The Power FET offers some unique advan- 
tages over power transistors. These advantages are: 

• High Input Impedance: These devices can be driven easily by standard 

CMOS gates. This property will greatly reduce the control circuit 
power dissipation raising the overall efficiency. 

• No Secondary Breakdown: The basic mechanism of FET switching does not 

Involve the transistor characteristic of secondary breakdown. This 
characteristic allows the full utilization of the devices dissipation 
and voltage ratings. 

• Can be Paralleled with Ease: Because these devices exhibit a positive 

temperature coefficient, they can be paralleled without current 
hogging. 

• Can be Serlesed with Ease: The high off impedance allows a series 

connection to be conveniently Implemented for higher voltage 
application. 

a Bulk Mode Control of current: This basic property permits the voltage 

drop of these devices to be reduced to very low levels by paralleling 
many devices. Other types of power switches exhibit junction voltage 
drops that set the low limit of power loss. 

• Low Power Density: The fact that these devices can be paralleled 

allows the power that is dissipated to be spread over a larger area 
which will increase the surge capability of the system. 

• High Speed Turn-Off: The FET is r majority carrier conductor therefore 

no recombination delay is incurred. This eliminates current overshoot 
and reduces power dissipation on trip out. 

These advantages have significantly improved the cost effectiveness of 
SSPC's, particularly for high voltage requirements. Also the high speed of 
the power FET allows application of instant trip which effectively limits 
fault current without high energy absorption. Normal inrush current would 
pass through but should not create significant voltage transients. With the 
Instant trip approach, the only significant energy absorption required of the 
SSPC is for the Inductive energy stored in the load. 

The level of instant trip is subject to trade-offs. A level set at 15 
times rated current would be required for universal application. For the 
Incandescent type loads that require that level there is little problem. 
However, if a primarily Inductive overload were allowed to charge up to that 
level, which is more than twice the normal inductive inrush, the energy that 
must be absorbed by the switching device then would be greater than 4X the 
normal maximum. Thus a preferred trade-off would be to set the Instantaneous 
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trip at 7.5X. The Incandescent type load would then require a 2X rated cir- 
cuit, which may already be required due to size or voltage drop consider- 
ations. Another consideration is that with zero voltage turn on, the inrush 
of Incandescent loads may be limited to less than 7.5X. 

The digital Interface to the power controller has also evolved through the 
years resulting in several options. The controller was originally conceived 
as a stand alone, relay type component which was wired into a power system. 

New applications will still require some directly controlled solid state or 
hybrid power controllers. However, for reduced cost and cable complexity 
SSPC's will be applied as an element of a system - a card module in the load 
management center (LMC) . 

As a stand alone or a system element, the SSPC has "smarts" of its own, 
performing several functions. Its relay function requires that it provide an 
auxiliary or interlock signal which is an ON-OFF logic/status signal. Its 
circuit breaker function requires that it provides a trip-free function with 
memory to protect itself as well as the load circuit. A trip status signal is 
also required. Also, since its "mechanisms" are solid state, there is a need 
for built- in-test (BIT). The interface to the SSPC thus requires command 
signals of ON, OFF, Reset and Test, and status signals ON, OFF, Trip and 
Fault. For interface, eight signals could be provided, four command and four 
status. Simple binary conversion reduces that to two each. A functional 
combination of OFF and Reset along with pulse timing provides all command 
requirements with one signal. A continuous "low" equals OFF & Reset, 
continuous "high equals ON & Test, a short "high" equals OFF & Test, and a 
short low is ignored. Thus three digital signals can provide the required 
interface. A further refinement, proposed by NADC, is known as the BIT 
interface. The BIT interface combines analog impedance along with the analog 
timing and combines the status signaling on the same line as the command 
signal ing • 

The interfacing of the SSPC as a system element of the Load Management 
Center (LMC) allows further options. As suggested in a recent Electrical 
Multiplex (EMUX) system study, some of the SSPC intelligence could be 
transferred to a common processor in the LMC. However, a more detailed 
analysis of that concept indicates a decisive disadvantage in circuit 
isolations, complexity and overload response time. Circuit isolation is 
required for voltage level shifting, avoiding ground loops and electrical 
noise decoupling. Current sensing over the wide range required (150:1) 
requires tight coupling to the load circuit which is contrary to the 
electrical noise decoupling required. Also, the wide ranging, low level 
current signal is more difficult to handle than discrete logic signals and 
circuit complexity would be increased in the sampled data system. The 
built- in-test and the overload calculations are relatively simple and are 
intimately associated with the isolated power element. Separating these 
functions would require more isolation and selection circuitry than the 
circuits saved through shared calculations. Also redundancy would be required 
in the shared circuitry. Overload response time would be jeopardized 
particularly at high overloads, so to minimize the power dissipation and the 
cost of the power element the instant trip response must occur in 
microseconls. An accurate scan of 64 to 128 current sensors would require at 
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least 0.5 seconds, affecting the accuracy of overload trip at the 300% level. 
Therefore It Is recommended that the SSPC functions be Integral and self 
contained . 

Failure effects must also be considered In the Interface to the SSPC’s as 
well as In the LMC system. Aircraft power distribution systems are uniquely 
different from Industrial or commercial power distribution systems. Rather 
than just branch circuit protection, overload protection Is provided for 
individual load circuits. This results In the need for hundreds of circuit 
breakers. This individual protection provides an effective fault Isolation 
so that a single load circuit failure will not effect other circuits. The 
SSPC provides the Individual protection of the load circuits, lut a fault In 
any shared SSPC control circuit would disable all of the sharing group. The 
interface to the SSPC then must minimize fault propagation. Therefore any 
shared circuitry must be redundant or fault tolerant. This fault Isolation 
requirement extends to the LMC processor as well. Since the processor shares 
control of a hundred SSPCs It -ust be made redundant or fault tolerant. 

5.1.2 Power controller developments . - Over the past 15 years hundreds of 
remote power controllers of various types and ratings have been developed and 
prototyped. This technology is now considered off-the-shelf by those 
cognizant of advanced aircraft electric system technologies. Additional 
efforts are being made to refine and improve performance and life cycle cost 
of these components. The development of technology for solid state power 
control has been strongly supported by NASA Lewis Research Center (reference 
5). They have been sponsoring the development of power semiconductor devices, 
achieving high current and high voltage capabilities. NASA LeRC has also been 
developing remcte power controllers for space applications, beginning with the 
28 Vdc units in the Space Shuttle, and recently achieved 1000 Vdc with 25 kW 
capability. 

The most recent solid state power controller (SSPC) developments have been 
directed at the load management center (LMC) concepts, wherein the power con- 
troller is a card module Incorporated within the LMC unit. One approach, con- 
figured for ARTNC 600 box specifications, is proposed and specified In the 
AAES Control Technology Demonstrator (CTD) design for the Air Force Wright 
Aeronautical Labs (AFWAL) (reference 6). The specified configuration Is shown 
in figure 60, Another approach employs the Improved standard electronic module 
(ISEM) and is being employed In the advanced aircraft electric system "hot 
bench" at the Naval Air Development Center (NADC) (figure 61). 

The SSPC is most cost effective at the lower current ratings. As shown in 
the "Load Distribution Comparison” (table 10), the majority of the loads 
(76 percent to 92 percent) are within the present cost effective range of 
solid state. The higher current loads are handled by the hybrid power con- 
trollers consisting of solid state control and protection circuitry operating 
a relay for the high current switching. The hybrid power controller is 
usually a larger stand-alone component which replaces the power relays and 
eliminates the need for an accessible power circuit breaker. The hybrid power 
controller has not received the same standardization effort as the SSPC; 
however, various implementations of the hybrid approach have been applied to a 
limited extent in the majority of current aircraft (references 7 and 8). 
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CONNECTOR 



15V DC 1 
15V DC 2 
CONTROL STATUS 
SIG. GND. 








(DIMENSIONS IN INCHES) 
5.740 t.005 


5.440 1.005 


H- .150 1.010 



0.3885 ±.005 




CONNECTOR NO. - NAC0 102-691 3 


PINOUT: FUNCTION PIN NO.(S) 

CONTROL 2 

CONTROL GNO 4 

POWER IN 37. 38. 87. 88 

POWER OUT 34, 83. 84 

NOTES: (A) NAMEPLATE LOCATION 

(B) COMPONENT TYPES ANO LOCATIONS ARE FOR ILLUSTRATION ONLY 


Figure 61. - Power controller, 
normally open, 1, 


270 Vdc, load switching SPST, 
2, and 5 amperes. 



TABLE 10. - LOAD DISTRIBUTION COMPARISON 


Aircraft Type 

C-15 

A-7 

c-x 

CTD 

Generator Capacity 

120 kVA 

25 kVA 

60 kVA 

120 kVA 

Total Loads 

Ac 

260 

138 

400 

240 

Dc 

253 

203 


260 

Ac Distribution - Cumulative 

0.5A 

13% 

442 

562 

— 

1.6A 

41 

(1A)63 

(1A>75 

— 

2.0A 

48 

74 

(2.5A)90 

522 

3.0A 

57 

— 

— 

64 

5.0A 

64 

87 

95 

74 

7.5A 

76 

— 

— 

84 

10. 0A 

90 

100 

100 

91 

15.0A 

94 

— 

— 

95 

Other 

100 

— 

— 

100 

Dc Distribution - Cumulative 

0.5A 

n 

302 


— 

1.6A 

66 

49 

— 

— 

2.0A 

75 

61 

— 

752 

3.0A 

81 

— 

— 

87 

5.0A 

88 

81 

— 

91 

7.5A 

90 

— 

— 

95 

10. 0A 

92 

99 

— 

98 

15.0A 

96 

100 

— 

99 

Other 

100 

— 

-- 

100 


5.1.3 Power controller applications . - The application of remote power con- 
trol in production aircraft has been surprisingly limited. An early standard- 
ized product was the remote controlled circuit breaker (RCCB) . This hybrid 
component was developed to meet the needs of the wide body aircraft. The RCCB 
provided a substantial weight reduction by eliminating many power cables 
between the main electrical load center end the manual circuit breakers in the 
flight station. The RCCB and other customized hybrid power controllers have 
been included in most subsequent aircraft designs. Even smaller aircraft such 
as the BAe-146, the 5F-340, the F-16, and the AH-1S helicopter have advanta- 
geously employed them. The RCCB was also applied in the Space Shuttle test 
craft and custom hermetically sealed hybrid power controllers were developed. 
The Shuttle design Incorporates an EMUX system utilizing hundreds of SSPCs, 
thus providing the technology and effectiveness of remote power control. 

To date the most extensive application of remote power control is in the 
B-l. A complete and separate EMUX system is incorporated into this advanced 
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aircraft design. This EMUX system employs more than 1000 remote power con- 
trollers resulting in the elimination of 57 miles of control and power wiring 
and a weight reduction of 1200 pounds. However, the remote power controllers 
in the Initial aircraft' are a hybrid type and cannot be reset remotely. A 
set of SSPC's were Justified and designed to be applied In the fourth test 
aircraft but were not because of the cut-off. The reinstated B-1B continued 
with the Initial designs but could be converted to solid state in the near 
future. 


5.2 Digital Data Multiplexing 

Because of the growth of thousands of feet of different wire segments in 
advanced military and commercial aircraft, industry has looked to the applica- 
tion of digital multiplexing (MUX) concepts as the technology for reducing the 
wire quant lty/welght and bringing viability to the aircraft's electric/avionic 
system. 

Basically the philosophy of multiplexing is predicated on the use of a few 
data-transmi88ion cables over which many hundred of thousands of signals may 
be transmitted from the flight station/ computer control center to the remote 
loads (avionic equipment or load controllers). The technology of multiplexing 
is by no means new and it is used widely in many industrial compiler systems 
and In aircraft. 

Up to this time, in the commercial aircraft electric systems, multiplexing 
has been constrained to the passenger service call systems and the passenger 
judlo-> ntertainment systems. The latter system is sophisticated in that it 
involves the transmission of high-quality audio signals, covering a frequency 
range of 15 to 40 kHz. There are fifteen separate channels, each using 12 bit 
resolution of audio data to minimize the quantization noise and Increase the 
dynamic range. Each channel Is updated at a rate of 25,000 sec and the serial 
clock rate is 4.5 MHz. 

In flight service these MUX systems have not been without their problems, 
but the development status of multiplexing can be said to be at a higu- r level 
of development than those early Passenger Entertainment/ Service (PE/S) sys- 
tems. Unlike any audio-entertainment systems, an electrical multiplex (EMUX) 
system will be Involved primarily with the transmission of discrete control 
signal data, rather than the transmission of multi-bit resolved analog data. 
However, for electrical quality and usage monitoring and utility service for 
other systems the EMUX system would be Involved with some analog digital 
conversion. 

The remote loads in an EMUX-conf igured airplane will still use separate, 
dedicated power wiring so any wire/quantity/ weight reduction will therefore 
come mainly from the elimination of the lighter gage control wiring and a 
shortening of the power wiring in the aircraft. However, it is implicit in 
this, that if major benefits are to be derived from an EMUX system, it must be 
achieve 1 by a complete revision of the conventional power bus architecture now 
prevalent in current aircraft. Simplification of the power bus architecture 
is in fact one of the primary objectives of advanced power management and it 
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can only be achieved if buses are located in close proximity to the electrical 
load moments In the aircraft. 


Figure 62 is a simple schematic of an idealized layout of an advanced 
power control system in which buses are located in the flight station, 
wing-roots, empennage, and other load areas in the aircraft. To this extent, 
It is a "distributed radial 1 * system, as opposed to "centralized radial*' 
distribution, still used in many past and current aircraft systems. In the 
latter system, as exemplified by the early jet/ prop Jet aircraft, the MBLC was 
usually located in the flight station area or in a forward fuselage area. As 
a result, the control wiring lengths were short and the power-wiring lengths 
were long* This is antithetic to the objective of an AAES system* It la 
therefore clear that if weight reduction is a main criterion, it can only be 
achieved if the power distribution is such that the electrical load renters 
are distributed and close to the loads. 

However, most of the earlier multiplexing activity was in the avionic area 
where such systems as digital air data systems (DADS) were developed into 
svstems such as digital data acquisition system. Multiple interior communi- 
cations system (M1NC0MS) was a very early (1964) Navy sponsored program for a 
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modern aircraft communications system and it utilized a combination FDM/TDM 
signal transmission system* This study! conducted by RCA for the Lockheed 
P-3, showed that some 34 coaxial cables could replace approximately 4000 wires 
in the conventionally wired airplane. Weight savings up to 1200 lb were 
predicted for the M1NC0MS. 

There is ample experience in military multiplexing systems, as exemplified 
by those used in the B-l, F-15, F-16, F-18, and Lockheed’s S-3, P-3, 0141, 
and C-5 aircraft* For the central integrated test systems (CITS), aircraft 
integrated data systems (AIDS), and other data systems, multiplexing has been 
a valuable adjunct to the aircraft’s electric systems since it eliminated many 
thousands of feet of wire which would have been required for the status and 
instrumentation monitoring. The selection of extensive multiplexing in the 
B-l bomber and the more recent selection and expansion of AMUX in all new 
fighter aircraft, stand as endorsements of the aviation Industry's commitment 
to the utilization of this new technology in modern weapon systems. 

5.2.1 Multiplexing technology . - Multiplexing is data transmission in which 
signals are transmitted simultaneously over frequency-assigned channels 
frequency division multiplexing (FDM); or sequentially as time-division 
multiplexing (TDM); or a combination of both, as an FDM/TDM system. The 
signals themselves may be transmitted as analog data or digital data, 
depending upon the type of modulation technique. Analog data transmission has 
the merits of simplicity in that no A-D (analog-to-digital) , and no D-A 
(digital-to-analog) converters are required. However, for noise immunity, and 
other reasons, industry has standardized on pulse-code-modulated (PCM) systems 
in which digital data (words) are transmitted. The data words could be 
transmitted on paralleled lines (parallel PCM) or sequentially on fewer lines 
(serial PCM). 

The development of a standard for serial PCM transmission began in early 
1968 with the formation of an SAE subcommittee on "Multiplexing for Aircraft" 
(SAE-A2K) . The committee developed the first draft of a digital time-division 
multiplex data bus standard and expanded that into a full system specification 
"Control Group, Electric Power" M1L-P-81883. The developing document 
represented the best that industry and military engineers could define and 
provided a sounding board for evolving ideas. It also provided the basis for 
USAF M1L-STD-1553, first issued in 1973 and now a uniform world standard for 
"Aircraft Internal Time Division Command/ Response Multiplex Data Bus". Since 
the inception of the SAE-A2K, the industry has been designing and producing 
hardware for various MUX systems. Some of these systems were developed during 
the standardization era (i.e., B-l and F-15) and are similar but incompatible 
with M1L-STD-1553 which was first applied on the F-16. Since then several 
modest revisions have occurred through coordination of industry and military 
in the SAE-A2K and via symposia, contracted studies and development programs. 
Recently the subcommittee was upgraded and renamed committee on "Aerospace 
Avionics Equipment and Integration" ( SAE-AE9 ) . As the name implies its scope 
has expanded, continuing development of future MUX standards, while adding a 
microcomputer and software subcommittee. An EMUX subcommittee was also 
established to promote, specify and standardize architecture and components 
for aircraft electric systems. 
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The key characteristics of the MIL-STD-1553 data bus are based on the 
requirements for a party line bus with up to 32 tape to operate asynchronously 
in a command-response (master-slave) duplex mode. The signals are transferred 
over the data bus in serial digital pulse code modulation form, the 
transmission bit rate on the bus is 1*0 megabits per second, and the data code 
is Manchester 11 biphase level. Each data word consists of a unique sync 
waveform (3 bit times), sixteen bits of data, and a parity check bit, as shown 
in figure 63. An intermessage gap and response time are also specified. The 
specification also covers cable and cable impedance, attenuation, termination, 
cable taps and stubs, and terminal input and output characteristics (waveform, 
noi6e, symmetry, common mode, and impedance). 

The rapid growth of large scale integration (LSI) /very large scale 
integration (VLSI) and the availability of integrated circuit (IC) MUX chips 
has led to the development of a multiplex capability that can meet the most 
sophisticated requirements of the commercial and military airplane* Thus, 
many alternative MUX designs have been and are continuing to be developed. 

For commercial aircraft, the leading standard is AR1NC specification 429 
applied to information transfer between avionics equipments. The 
specification is for point-to-point, unidirectional, moderate bit rate data 
transfer. While this is suitable for transferring a large quantity of data to 
one or several equipments, it is not usable for the widely scattered, discrete 
input-output linkages required in the electric system. For industrial 
controls there are as many MUX designs as there are product vendors, and 
basically these designs are permutations and combinations of each other 
providing a variety of parameter trade-offs, with little if any overall 
advantage. 

Because of the characteristics of the MUX signal transmission format all 
signals must be conditioned and digitized before inputting onto the data bus. 
Amplitude scaling of analog data into the desired number of bits is necessary. 
Typically in most MUX systems, conditioning, buffering and formatting is 
accomplished inside the equipment, or in remote terminal units (RT). 

Figure 64 shows a very simple block schematic of a MUX element in which an RT 
performs the role of interfacing the individual equipments with the data bus. 
That approach lends itself to retroactive MUX installations. It proliferates 
the use of interface connectors however and there is a large amount of intra- 
wiring between the equipments and the individual RTs. The alternative and 
better approach is where the intrawiring and additional connectors are 
eliminated by having bus interface electronics built into each equipment. 

Another example of system architectures is that shown in figure 65. These 
schematics were prepared by Vought-LTV as a part of the work on the A-7 
simulator program and illustrate the proliferation of wiring and connectors 
when the multiplexer data terminal (MDT) is a stand-alone type (figure 65a) as 
opposed to the configuration in figure 65b where the MDT is integrated into 

load management center (LMC). The latter permits intrawiring and 
interfacing with the power controllers to be accomplished inside the LMC. 

This approach offers potentially higher reliability and eliminates many 
connectors. 
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5.2.2 Multiplexing Applications . - Because of the success In the developments 
of multi pi ex com ponen t s an<f system s , there is an Increasing commitment by the 
aerospace Industry to multiplexing. The selection of multiplexing for modern 
weapon systems such as the B-l and F-16 airplanes endorses the military’s 
confidence In the utilization of multiplexing for major roles In these 
aircraft (reference 9). 

The Air Force's promotion and technical direction of extensive multiplex 
utilization for the EMUX, AMUX and CITs system In the B-l airplane was Itself 
based on the critical space and weight problems in this aircraft and the need 
to incorporate more sophisticated management of the aircraft’s avionic/weapon 
system and the electric system. In F-16 airplanes nearly all the major weapon 
systems are interfaced via a MIL-3TD-1553 data bus to the fire control com- 
puter and a back-up computer in the internal navigation unit (figure 66). The 
AMUX system for the F-16 was selected not so much for any wire weight saving, 
but rather for the versatility and flexibility, offered by multiplexing . 

In a nonairborne application, the U.9. Army Tank Automotive Research and 
Development Command Installed a MUX system In the M60A2 tank on the basis of 
an analysis that indicated improvements in the inventory logistics and life 
cycle costs of the tank. The U.S. Army has additionally selected multiplexing 
for LAMPS and for the Advanced Attack Helicopter. There is therefore no lack 
of development and implementation experience in multiplexing in military 
systems today. 


5.3 Digital Electric Management Evolution 

The aerospace electrical industry has proposed methods of automatic load 
management that would provide significantly better management and improve data 
display and monitoring methodology for advanced aircraft (ref. 10). The AAES 



Figure 66. - F-16 avionics system architecture. 
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designation is the most current and more encompassing than EMUX used in 
preceding sections, although the acronyms are often used interchangeably. 

The initial activity, already mentioned, was the NADC/AFWAL sponsorship of 
SOSTEL and Data Handing System developments for the A-7 airplane. The purpose 
and precepts of the A-7 simulation program were to make a direct comparison 
between a solid state/multiplexed electrical system and a conventional 
hardwired A-7 electric system. In the course of this program the synergism of 
solid state power controllers, solid state signal sources, programmable 
processor control, and a data handling system (multiplexing), was realized. 

The data handling system for the A-7 simulator comprised the following: 

• A Master Control Unit (MCU) 

• Six Remote Output Terminals (ROTs) 

• Six Remote Input Terminals (RITs) 

• Fault-Indicator Panel (FIP) 

• Pilot Control Panel (PCP) 

Each of the RITs and ROTs had a 64 channel capability. The RITs were 
designed for interfacing with solid state signal sources (SS) and the ROTs 
were designed for interface with solid state power controllers (SSPCs). 

In the evolution of that system the function of the RIT and ROT were 
combined into a universal remote terminal. Built- in-test (BIT) was 
incorporated and extended into the SS and SSPC. The MUX was also changed to 
conform to M1L-STD-1553B. 

Another more advanced application of a multiplexed electric system is the 
EMUX system in the B-l bomber. Here the objectives were to remove some 57 
miles of wire from the airplane and to provide an advanced management control 
system that would reduce the crew workload in the military environment. The 
other objectives were to reduce life cycle costs and bring viability to the 
aircraft wiring installation. 

The B-l EMUX system (figure 67) is designed to handle some 9000 signal 
inputs/outputs, which are handled by 22 to 26 multiplex units (MX) and expand- 
able to 42 MXs (21 per side). Two dual-redundant data bus systems are routed 
separately in the fuselage and these Interface with the MX units via couplers 
which protect the data buses against catastrophic faults in the RTs . The 
heart of the EMUX systems is the centralized Boolean control processors which 
solve the equational circuit logic and supervise the control of the electrical 
system. 

The B-l EMUX system has a 210K bit programmable memory (PROM) which 
permits a wiring reprogrammability as required by circuit modifications and/or 
equipment updates. In fact, the technology of multiplexing/processor design 
is best exemplified by the fact that each B-l control processor can solve 


144 



EMUX SYSTEM 

• TIME DIVISION MULTIPLEX 

• NUCLEAR-HARDENED UNITS 

• CAPACITY - OVER 13,000 SIGNALS 

• HAS SPECIAL-PURPOSE BOOLEAN PROCESSORS 

• USES 210,000 BIT READ ONLY MEMORY 

• HAS FLEXIBLE ROUTING & LOGIC CAPABILITIES 

• ISOLATED RIGHT & LEFT EMUX SECTIONS 

• USES B 1 STANDARDIZED INTERFACE SIGNALS 

• PROVIDES GROWTH CAPABILITY (42 UNITS MAX) 



Figure 67. - B-l EMUX system. 


5800 expressions with 28,000 literals in less than 30 ms. Further, to meet 
the Air Force's stringent requirements, all the EMUX hardwire for the B-l 
aircraft is designed to meet full electromagnetic interference/nuclear 
hardening protect ion . 

5.3.1 Advanced Aircraft Electrical System Technology . - The conventional 
aircraft electric system consists of a multitude of individual circuits, 
typically including a control circuit, and a load circuit. The control 
circuit consists of a circuit breaker, control switches, relay contact logic, 
and a power relay. The load circuit, usually fed through several st ges of 
bus and feeder breakers, consists of a load circuit breaker, power switches 
and relay contacts. This conventional scheme requires thousands of components 
and miles of wire, however it does provide the control required. Also the 
individual circuits and circuit breakers, if properly coordinated, maximize 
fault isolation. The goals of AAES are: to minimize wiring, both control and 

power; to reduce components, combining control and protection; to improve the 
quality and availability of electric power; and to maximize the viability of 
the system, accommodating the rising rate of modifications and additions. 

These same objectives tend to reduce fault isolation therefore a major 
requirement in AAES is the incorporation of redundancy, fault tolerance, and 
bull t-in-test to restore the level of fault isolation. The developments and 
applications described in the following section have proven that this 
reliability requirement can be met and improved. 

The heart of the AAES technology is the remote power controller. As 
described in the previous section (Digital Power Control) the capability for 
remote control provides a major weight saving while improving the logistics of 
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power distribution. This advantage has been exploited* to a very limited 
extent* in all current aircraft* but the full realization of its potential 
requires a revision of the total system* the AAES approach. 

The load management center (LHC) is an essential block of the AAES which 
includes the remote power controllers. As a "black box*’, an LMC is merely 
interposed between the power sources and a multitude of loads with a con- 
nection for control information. The technology of remote power control has 
kept pace with this system concept through the development of the module 
configurations shown in the previous section. The LMC concept is also a 
logical expansion of the remote terminal required to multiplex the control 
information* thus joining the multiplex technology with the remote power 
control technology in the same ’’black box”. 

The power system processor (PSP) is the brain of the AAES, generating the 
control Information through the solution of system control equations. The 
technology of the PSP has also kept pace with the digital electronic evolution 
starting with discrete combinational logic, then special purpose sequential 
logic, and general purpose minicomputers (AN/AYK-14 and M1L-STD-1750) . These 
advances in control processing provided additional advantages to remote power 
control and AAES. The sequential logic was compatible with multiplexing which 
replaced miles of wire required to distribute control information throughout 
the aircraft. The sequential processing also provided for software 
programmability which greatly increased the viability of the system. The 
minicomputer improved the programmability, and Increased functional 
capability, thus improving the cost effectiveness. 

This increased funct ionability is applied to power/ load management wherein 
load priorities are dynamically allocated on an individual basis thus 
providing maximum utilization of the generated power, i.e., reducing the need 
for excess generating capacity. With the individual load management 
capabilities of AAES the hardware partitioning of the electrical distribution 
system (emergency bus, essential bus, etc.) is not required. This allows 
consideration of alternative power distribution architectures, concentrating 
on uniformity and integrity, such as the redundant ring main architecture. 

This automatic power/load management also reduces crew work load. This is 
further reduced by the diagnostic capabilities of the computer managed AAES 
providing: transient filtering (auto reset, etc.), prioritized warnings 
(display by exception), and fault recording (nonvolatile memory). Crew work 
load is also reduced through integration of electric system warning and status 
display with the flight system displays. 

The centralized processing of control information is consistent with these 
expanding functionality requirements, providing maximum integration and 
coordination throughout the aircraft. The command/ response protocol of the 
1553 data bus is equally compatible. However, the processing requirements are 
growing more rapidly than central computer technology. For a large aircraft 
such as the B-l, the processing requirements had to be split between two sets 
of special purpose processors. Development of new software methods can 
improve processing efficiency and system response times. One method, employed 
in the NADC development, applies a dynamic scheduling algorithm that responds 



only to stale changes, thus solving only the control equations that are 
affected by the state change, Instead of solving all equations all the time. 
Another method, employed in the AFWAL development, partitions the system 
according to Individual response requirements and schedules the processing 
accord ingly . 

The greatly expanded application of electric equipment in future aircraft 
as proposed in this study could result in a large Increase in the quantity of 
data that must be distributed. This can be handled with multiple data buses 
or an Increase in the speed of the data bus, either of which add cost and 
complexity. A better approach, as proposed in the AFWAL study, is to add 
intelligence to the load management centers (lilCs). This allows distributed 
parallel processing as well as data reduction. A microprocessor in the LHC 
performs the following functions: 

• Condensing status responses from the remote power controllers; since 
the status is the same as commanded except when a fault occurs in 
either the controller or the load. 

• Filtering data; since many of the faults and status errors are of a 
transient nature, they can be resolved locally and need not enter the 
system data stream. 

• Recording built- in-test data; only transmitting as required for central 
integrated test and as needed for maintenance. 

• Processing load management priorities for the individual loads 
according to the priority level established by the central processor. 

• Processing control equations to the extent of the information locally 
available so as to off-load the power system processor. 

The LHC concept also promotes subsystem development wherein the subsystem 
unit can tap into the ring main power distribution bus, tap into the data bus, 
and operate autonomously except for minimal coordinating communication. 

The technologies required have been verified in current developments and 
applications and provide a broad base of components and techniques from which 
to assemble a highly effective AAES for future aircraft. 

5.3.2 AAES Hardware Development . - Lockheed has developed an alternative 
method for providing automatic load management and other advanced control 
concepts while avoiding the complexities of a MUX system. Its methodology is 
such that it can be designated a hardwired- AAES and may be more suitable for 
smaller or commercial aircraft. Such a system uses miniature-gage "dedicated" 
control wiring, in which each remote power controller (SSPC or RCCb) is simply 
direct wired for Individual control. Thus the system has a certain basic 
simplicity in that it is wired in a manner similar to the conventional 
electrical installation. As there are no interfacing electronics and complex 
multiplex system between the signal sources and the controllers. The basic 
reliability should be equivalent to a conventional circuit the dedicated 
wiring retains the fault insulation of the conventional system and its 
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simplicity reduces the need for BIT and self-diagnostics. In more recent 
years, the Lockheed hardwired- AAES was given the acronym HALMS: 

Manual /Automatic Load Management System. 

Figure 68 is a photograph of an AAES functional mock-up wh: -h incorporates 
the following: 

s A current-1 im It ing/ display control panel to eliminate control circuit 
breakers . 

• A min la lure- gage control wiring system wiLh current limiting to 

eliminate the problems of fault currents and fire hazards In the 
wiring. 

e An automatic load management system to prioritize loads and prevent 
overloading of generators/overtorqulng of engines. 

e A wire programming capability to permit wiring reconfigurations and 
equipment updates. 

• Quick a t tech/ detac h modular InstruaenL panel assemblies. 

• A Boolean processor, such as the Control Logic Assembly used in the S-3 
aircraft. 

s Solid state power controllers rated at 28 V 10 amp. 

• Advanced hybrid ac power controllers with solid state front ends to 
interface with low level logic control system. 



Figure 68. - Functional AAES mock-up. 
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• Power controller cabinet assembly to bring advanced thermal and 
management techniques to solid state devices. 

Host of the above items/assemblies were reduced to pre-production format 
and the integrated system testing was performed validating the overall system 
efficacy of this Lockheed-AAES concept. The SSPCs were a significant item of 
development , but lack of funding prevented full scale qualification- type 
testing to be accomplished. The functional operation of the SSPCs under 
normal and abnormal loading conditions was established and verified during 
Integrated system tests. These tests were performed using a miscellany of 
real and simulated loads. The real loads consisted of rotary/linear 
actuators, loads, heating dc motor ac fan motor and large power contactors. 

The simplicity of the control circuit is illustrated In figure 69. In 
this schematic a typical control circuit breaker is replaced by a dual-lamped 
alternate-action push-switch. The lamp-switch permits tripping of the remote 
controllers in a fashion similar to pulling a control circuit breaker. The 
dual-lamp switch also doubles as a current limiting device while providing at 
the same time en ability to monitor the status of the remote power controller 
and flag its condition to the flight station. The final function of the 
lamp-switch is to provide a reset capability for the SSPC or RPC when it trips 
and latches out. Also, because of the low level currents required, the 
control circuit can utilize miniature gauge wire. This could be 26 gauge 
conventional wire, but there are many significant advantages to using very 
small gauge flat cables that offer mass termination techniques. 

Since current limiting i6 effective in the control wiring, load management 
can be effected simply by grounding the control line of any RPC, so that it is 
deprived of a driving voltage. If many loads need to be disconnected this is 
accomplished simply by collecting the appropriate loadcontrol wires via 
isolation diodes to a bus which is grounded through power transistors. In the 
functional mock-up a quad power-transistor array was used to control four 
groups of loads, prioritized at different levels. Each of the four power 
transistors was controlled by a gating voltage developed by the load 
management logic assembly (LMLA). The LMLA itself as designed and fabricated 
by Lockheed, is shown in figure 70. This particular assembly which U3es 
modular cards supervises and controls the operation of some 200 loads. The 
LMLA can however be extended to any number, simply by the addition of extra 
cards • 

Selection of the priority level of Individual loads can be effected by a 
joining of the LMLA with the programmable wiring module (PWH) as shown In 
figure 71. This module is an lnsertable/removable wire program that can 
handle a confluence of 360 wires. Again, the capacity Is expandable by the 
addition of more Zero Insertion Force (Z1F) connectors. With the use of Z1F 
connectors, the wire wrapped program board can be Inserted and removed with 
minimal force. 

It is implicit in the hardwire control technology that it can be easily 
interfaced with remote ac or dc power controllers. The ac controllers, (which 
are modified electromagnetic contactors), are designed with a similar input 
impedance as the SSPCs so the ac and dc RPCs can be controlled by the same 
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Figure 70, - Load management logic assembly. 



Figure 71. - Wire program board. 





current of 1*0 mill lamp or Icbb. Since the controllers require a steady 
control current similar to a conventional relay, the controllers are less 
affected by transient voltages or any other electromagnetic anomaly. Such 
perturbations in a sequential digital control system could cause transient 
errors. 

Thermal management and protection again at voltage spikes were Important 
design criteria for the SSPC cabinet assembly. This particular assembly 
provides a thermally and electrically benign environment for the SSPCs. 

Figure 72 Is a photo of the SSPC cabinet assembly which accommodates six metal 
cored circuit boards, each of which carries eight 10 amp SSPCs. The novelty 
of the design Is that the metal cored circuit board doubles as a heat 
conduction plane and a printed circuit wired module. These boards can be 
inserted/ removed from the cabinet assembly without any electrical wire or 
mechanical screw/ stud disconnections. 

Voltage tr ana lent/ spike-voltage protection for the SSPCs Is provided at 
the moLher board level by the use of two solid state surge-arrestor a and two 
ln-llne chokes. The design objective of the spike voltage protection circuit 
was to select arrestors having an extremely fast "turn-on" time so that the 
SSPCs would not be exposed to any high voltage transient before the arrestors 
clamped the voltage to ground. 
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Figure 72. - SSPC cabinet assembly and SSPC circuit boards. 
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Figure 73 is a photo of the ac load controller (RPC) cabinet assembly, 
which mounts nine modules each cons is ting of three single-phase, 200 Vac, 10 
amp relays and one three-phase, 200 Vac, 10 amp relay. These modules are 
quick-attach/ detach assemblies that can be installed and removed from the 
front of the panel without disconnecting any wiring. The ac power controllers 
utilize solid state front end circuitry and auto reset thermal circuit 
breakers. As an additional refinement, protection against open-phase failure 
is also provided for the three-phase relays* 

5.4 Digital Electric Management 

The foregoing sections have described the technology and developments in 
advanced aircraft electric systems that can be applied to the IDEA. Because 
they are based on past and current activities, they have only addressed the 
requirements of conventional power systems and utilization equipment. The 
IDEA concept greatly expands the use of electric power, replacing hydraulic 
and bleed air power. These are primarily high power loads which strongly 
affect power generation and primary power busing which are covered in other 
portions cf this study, bit since there are relatively few of these 
additions, their effect on the Electric Power Management System is not a 
governing factor. Also, they are mostly autonomous subsystems so that the 
added load on the data bus and processor is not a problem. The following 
design and analysis can therefore directly apply to those technologies and 
developments of the previous sections a 

As previously discussed, the broad AAES studies by NADC and AFWAL include 
generators, generator controls, power bussing, power conversion and special 
utilization equipments. These hardware and equipment advances. Included in 
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the IDEA, are beyond the scope of this section of the study with the possible 
exception of the generator controls. However, in all of the previous AAES 
studies it was found that the generator control functions and requirements 
were not compatible with EMUX systems. This has been generally resolved by 
treating the generator and its GCU as an autonomous subsystem with a remote 
terminal interface to the EMUX. The data handled by this GCU-RT would include 
generator status Information required for power and load management and the 
control and status information for the Integrated control/ display units. With 
that approach then the AAES acronym is too broad to be used in the following 
system description. The EMUX acronym is also unsatisfactory because mult- 
iplexing is only one component of the system. A more descriptive acronym is 
Digital Power/Load Management System (DP/LMS). 

Digital power control provides the basic advantage to advanced systems. 

The technology for the remote power controller is readily available and would 
be "off-the-shelf” if the quantity of applications justified it. In spite of 
the lack of application, the development programs have kept the technology 
up-to-date; improving characteristics, configuration, and cost effectiveness. 
The selection of solid state (SSPC) or hybrid (RPC) depends on their cost 
effectiveness so that the quantity of each is primarily based on economics at 
the time of commitment. 

Digital data multiplexing (MUX) offers further advantages, but the change 
from discrete wiring to the complexities of a MUX system requires a major 
commitment and the attendant operations confidence. The hardwired Manual/ 
Automatic Load Management System (MALMS) offers a method for attaining digital 
power control and load management without the complexities and expense of a 
MUX system. The simplicity of the MAIMS approach could be an advantage for 
small commercial aircraft, particularly when MUX is not employed in any other 
systems. However, for a large aircraft such as investigated in this study, 

MUX is already justified in the avionics system and in the flight control 
system. Therefore a MUX system is recommended, particularly a MUX data bus 
per M1L-STD-1553 in accordance with the previous technical analysis. 

The load management center (IMC) concepts provide an integration of the 
SSPCs with the MUX. The "smart" LMC is a natural outgrowth of this inte- 
gration. Particularly since a microprocessor is generally used to Implement 
the MUX interface protocol and data management for the subsystem Interface. 
Therefore a "smart" IMC having a 16 bit microprocessor with adequate memory 
and software to do the local processing previously itemized is recomm -d for 
this IDEA Load Management System. 

The power system processor (PSP) is the central component of any EMS, 
required to exploit the advantages of digital power control. The only trade- 
off involved is in the selection of the actual hardware and software at the 
time of Implementation. F evious studies and Implementations of EMUX systems 
have not shown a requirement for any special characteristics for power system 
processing. 

The selection of the architecture of an DP/LMS for the IDEA is straight- 
forward. The size of the aircraft and the quantity of sensors and loads 
justifies a split system approach. That is two partially independent EMUX 
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systems with a cross tie to coordinate the load/ power management functions and 
to transfer data between the systems. Each PSP is the active primary 
processor and bus controller for its segment and acts as a condition monitor 
for the other segment. Each PSP also has standby capacity adequate to control 
the entire system in a fail-safe mode. 

5.4.1 IDEA DP/LMS desig n. - The remote power controller selections for the 
Electric Management System of this IDEA study are listed in table 11. 
M1L-P-81653 is the basic specification for these power controllers. The 
majority of the controllers are solid state and the preferred configuration 
for commercial aircraft application is shown in figure 60. This multi-unit 
card is compa' ible with ARINC 600 box specifications. Figure 74 shows the 
circuit density that can be achieved, with up to 8 SSPCs per card. With this 
arrangement all required SSPCs, including spares, could be contained on 200 
cards with an average of 16 multiunit SSPC cards per LMC. The electro- 
mechanical hybrid Power Controllers and the bus contactors would be external 
to the LMC, except for the power source selector relays required for the 
internal SSPC power buses. 

The load management center (LMC) would also contain the redundant RT to 
interface with the multiplex data bus. The intelligent LMC concept, as 
previously described, should be incorporated through redundant imbedded 
microprocessors. The microprocessors should be per MIL-STD-1750 if they 
become commonly available as planned. Full advantage of the local distributed 
processing should be taken, including normal and fault data filtering, BIT 
with nonvolatile memory, and partial control equation solution. It is 
estimated that 12 LMCs would be required to handle the 1000 typical loads and 

the added power control for the EMAs and FCS that were incorporated in this 

IDEA. In addition to power control, power conversion equipment should be 
included in the LMCs or in close proximity. By having local power conversion, 
the need for separate ac, dc, and other types of power bussing is eliminated. 
This is particularly effective since prioritized power bussing requirements 
are provided by the power management function. Also, since the controls and 
logic are electrically isolated from the power system, there is no longer any 

need for a centralized point of regulation (POR). Each LMC and the equipment 

it serves can be autonomous with its own POR. Finally, with local power 
conversion and the power management function, only a single power source is 
required - the redundant ring main bus. 

Separate remote terminals (RT) are also required to pick up some of the 
scattered sensor signals. For sensors that are in the same area as the loads 
that they effect it is best to connect these sensors to the" LMC, allowing 
local processing of those control equations. It is estimated that six RTs 
will be required for the EMS. Additional RTs will also be included in the EMS 
to exploit the multiplexing capabilities and equipments as a utility service 
for other subsystems. Multiplex data buses per MIL-STD-1553 are selected for 
the reasons given in the preceding sections. 

Two power system processors (PSP) are required for the DP/LMS. There are 
no extraordinary requirements for these processors except that they incorpo- 
rate two data bus control units (BCU) providing for primary control of one 
redundant data bus, and backup control of another. A 16 bit micro-processor 
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TABLE 11. - POWER CONTROLLER SELECTION 



(BASED ON STANDARD AIRCRAFT LOADS) 


Type 

Min. Wire 

Rating 

Quantity 

AC-SSPC 

#26 

1.0A 

344 


#26 

2.0A 

74 


#24 

3.0A 

73 


#22 

5.0A 

46 


#20 

7.5A 

20 

AC -HYBRID 

#12 

20A 

4 

AC-3<f) 

#20 

7.5A 

10 

#18 

10A 

10 


#16 

1 5 A 

6 


#12 

20A 

6 

DC-SSPC 

#26 

2.0A 

296 


#24 

3.0A 

48 


#24 

5.0A 

25 


#20 

7.5A 

20 


#18 

10A 

14 


#16 

15A 

6 


#12 

20A 

4 

DC -HYBRID 

# 8 

35A 

14 


per MIL-STD-1750 would provide adequate processing capability and should be 
employed if they become widely available as expected. The software for the 
PSP may also become standardized as far as the real time processing executive, 
such as the DAIS Executive. The actual control algorithms will have to be 
customized to the ^equit ements of the IDEA. However, the control software 
should incorporate the new techniques described in the AAES Technology 
section. 

The architecture of this DP/LMS (figure 75) provides two separate, 
redundant data buses. One reason for employing two buses is to accommodate 
the large capacity of the IDEA DP/LMS, including wiring into the wings and 
into the empennage. An objective is to limit the length of each to less than 
300 feet. This also splits the data bus and processing loads while gaining 
extra redundancy in bus control and in processing (fail-safe mode). The LMCs 
and the RTs are distributed throughout the aircraft so that the sensor and 
load wiring is minimized. An average length of 20 feet for each wire segment 
is estimated for this system. Each data bus has capacity for 31 RTs although 
only 9 each are required for the electric system. Additional RT taps are 
shown in figure 75 to indicate RTs provided for the utility service. 

Additional considerations in selecting the DP/LMS architecture and the 
DP/LMS itself include the added power and digital data distribution required 
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115V AC 1 PHASE CIRCUIT ARRANGEMENT 


CURRENT 

1 AMP 

2 AMP 

3 AMP 

517. 5A. 

RATING 

PER UNIT 

PER UNIT 

PER UNIT 

PER UNIT 


UNITS 
PER CARO 


1 - 2 
3 - 4 
5 - 6 
7 - 8 
9-10 
11 - 12 
13 - 14 
15 - 16 
17 
19 
21 
23 
25 
27 
29 
31 
33 
35 

37 - 38 
39 - 40 
41 - 42 
43 - 44 
45 - 46 
47 - 48 
49 - 50 
51 - 52 



OUT 4 
NEUTRAL 
NC 

SIG. GNO. 
CNTL 1 
CNTL 2 
CNTL 3 
CNTL 4 
15V DC 
15V OC 
CNTL 5 
CNTL 6 
CNTL 7 
CNTL 8 
SIG. GNO. 
NC 

NEUTRAL 
OUT 5 
OUT 6 
OUT 7 
OUT 8 
PWR IN 


NC 

NEUTRAL 

NC 

SIG. GND. 
CNTL 1 
CNTL 2 
CNTL 3 
NC 

15V OC 
15V OC 
NC 

CNTL 4 
CNTL 5 
CNTL 6 
SIG. GNO. 
NC 

NEUTRAL 

NC 

OUT 4 
OUT 5 
OUT 6 
PWR IN 


NC 

NEUTRAL 

NC 

SIG. GNO. 
C 
C 

NC 

NC 


NC 

NC 

CNTL 3 
CNTL 4 
SIG. GNO. 
NC 

NEUTRAL 

NC 

OUT 3 
NC 

OUT 4B 
PWR IN 


NEUTRAL 

NC 

SIG. GND. 
CNTL 1 
NC 
NC 
NC 


NC 

NC 

NC 

CNTL 2 
SIG. GND. 
NC 

NEUTRAL 
OUT 2A 
OUT 2A 
OUT 28 
OUT 2B 
PWR IN 


TERMINAL 


NOTE: EVEN NOS. 18-36 ARE ALL SIG. GND. 
NOTE: A - 5A„ B - 7.5A 


Figure 74. - SSPC circuit arrangement 
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Figure 75. - DP/LMS architecture. 

















for the electric flight control system and the environmental control system. 

A method for providing highly reliable, redundant electrical power for the 
electromechanical actuator systems (EMAS) is shown in figure 76. Each of the 
LMCs can select power from either side of the wing loop bus tie breakers 
(BTB). Thus four isolatable power paths are available to each EMA through the 
two LMCs. An additional standby power source could also be provided for 
flight critical EMAS. This standby power source would not require any load 
management control so that the power connection would be made through a bus 
tap fuse module . 

The DP/LMS can also serve as a standby or auxiliary digital data path for 
EMAS control as shown in figure 77. Here the primary EMAS control is provided 
by an independent flight control multiplex bus and RT, which may be addition- 
ally redundant. This would provide a triple redundant data path for a flight 
critical actuator . 

5.4.2 DP/LMS weight analysis . - Weight reductions using the DP/LMS occur in 
several weight groups such as electrical system and flight controls. These 
benefits are therefore discussed in Section 12.2.3. 

5.4.3 DP/LMS reliability analysis . - Reliability is a critical trade param- 
eter but reliability models need to be based on the details of a specific 
system. For systems making extensive use of microelectronics M1L-HDBK-217C, 
RADC-TR-70-232, and RADC-TR-67-01 8 would be employed. High reliability in an 
FMUX system is attained through redudancy in the PSP, MUX, and RT/LMC as 
previously ciscussed. Details of the B-l EMUX are available and the Harris 
Corporation analysis predicts an exceedingly good system reliability of 
0.999992 for the typical B-l mission. The mean time between corrective 
actions was assessed at 42 to 50 hours for the 36 boxes of the B-l EMUX 
system. 

Although the details of this proposed Digital Power/Load Management System 
are not complete, a good reliability estimate can be obtained by employing the 
analyzed values cf the B-l and the completed developmental systems. A reli- 
ability estimate of a conventional electric system consisting of individual 
control/power circuits may be obtained by assuming a linear relationship 
between the individual circuit failure rates and the number of circuits in the 
system. This same approach can be applied to the DP/LMS if the failure rates 
of common or shared hardware, such as the PSP, MUX, and RT/LMC, are accounted 
for in the power generation and power bussing analysis. The linear estimate 
also assumes that an "average* 1 control/power circuit can be defined to deter- 
mine a representative failure rate per circuit. Evaluation of previous 
detailed power system studies provides that an average conventional circuit 
consists of a control circuit breaker, two control switches or relay contacts, 
a power circuit breaker, and a power relay. The failure rate of these com- 
ponents plus the attendant wiring and connections sum to a circuit failure 
rate of 23.3 per million hours. With digital power control only one device, 
the RPC, is interposed between the power and the load. Al^o, the signal 
sources are passive, receiving power from the RT interrogation pulses, and the 
control logic is incorporated in the common hardware. The resulting failure 
rate of the digital power control circuit is only 5.2 per million hours. With 
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more than 1000 circuits required, this improvement in circuit failure rate 
more than offsets the added common hardware in the DP/LMS. 

The reliability estimates for the common hardware, to be added to the 
power generation and bussing analysis, are also required to estimate the life 
cycle cost of the DP/LMS. The power system processors as described are esti- 
mated to have an individual MTBF of approximately 5000 hours, but with fault 
tolerant design the effective failure rate is reduced to 50 per million hours. 
With two processors cross coupled, for fail-safe mode the probability of 
failure during a ten hour flight reduces the (10 x 50/10°; or 0,00000025. 

The remote terminals, including those incorporated in the load management 
centers, are estimated to have an individual MTBF of approximately 10,0000 
hours. But with dual redundancy, the effective failure rate is reduced to 5 
per million hours. 

Overall, the increased reliability of the DP/LMS approach can be 
attributed to the reduction of component units by the sharing of highly 
reliable microelectronic circuitry and the low failure rate of solid state 
power controllers. 

5.4.4 DP/LMS cos t analysis . - The DP/LMS features an incentive for its 
application and many of its advantages also provide a direct cost savings. In 
first order is the weight savings, shown in the previous section, which reduce 
the direct operating cost (DOC). The DP/LMS approach reduces not only weight 
of wiring but also quantity, thus reducing harness costs. Another advantage 
of the DP/LMS approach is clearly related to the increased reliability, shown 
in the previous section. This is reflected in lower maintenance and 
replacement costs as well as a decrease in cancelled flights. 

High labor costs also favor the adoption of DP/LMS for commercial 
aircraft, not only due to the improved reliability but also the reduction in 
time for maintenance. This results from the extensive built- in- test (BIT) 
provided by DP/LMS. The BIT along with the modularity of the design concepts 
significantly reduces the man hours per maintenance action as compared to a 
conventional system. 

Closer examination of the composite costs results in the following 
observat ions; 

(a) The greatest cost of the EMS is the relatively well defined 
acquisition expense. 

(b) The substantial projected savings from reduction of maintenance and 
cancelled flights also indicates a higher availability and further 
value or lower LCC for the EMS. 


5.5 Plans and Resources 

The total concept of digital data magenement, digital power control, and 
digital load management, interfaced with solid state/hybrid power controllers, 
is in a very advanced stage of development. Many suppliers are involved with 
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the design, development and manufacture of the component elements, while 
others are Involved with the systems technology and the integration of 
specific parts of the total systems technology. Another type of systems 
management and Integration is that undertaken by Vought-LTV, who working under 
NADC/AFWAL contracts, was responsible for Integrating, in a total sense, a 
complete digital electric system in mock-ups of an A7 airplane. A similar hot 
bench mock-up of a digital power/load management system for an advanced 
technology aircraft is imminently due for demonstration at NADC Warminster to 
add to the previous system Integration experience on the A7 mock-ups. 

Relative to the foregoing, NASA resources are not required on a major 
scale to ensure the maturation of the technology, but there are incipient sys- 
tems integration problems that warrant NASA's continuing interest. This is 
particularly the case in the area of solid state and hybrid power controllers. 
There is also the question as to whether the cost, complexity, and sophistica- 
tion of the technology in the advanced military weapon systems is warranted 
for the commercial transport and, particularly, for the small commuter type 
transport. Commercial airlines would welcome the benefits of digital control 
and advanced power management techniques, but they cannot afford the system 
design philosophy, espoused for the military airplane. Therefore, NASA should 
consider the sponsorship of simpler alternative systems that would not involve 
a M1L-STD-1553B data bus and the unequivocal commitment of the technology to 
all solid stale control (via contactless switches, solid state, and hybrid 
power controllers). Since the existing technology has already been substan- 
tially supported by military funding, it appears essential that NASA should 
consider the support of an alternative system that would be more dedicated to 
the specific needs and requirements of commercial aircraft- 


6. ACTUATION SYSTEMS FOR THE IDEA AIRPLANE 
6.1 Flight Control Actuation Options 

The flight control actuation functions were evaluated first since it was 
felt that these functions represented the most rigorous applications which 
occurred on the airplane and, thus, would act as a "bellwether” and guide for 
all the other aircraft actuation functions. Each potential actuation approach 
was evaluated against the static and dynamic performance requirements listed 
in table 12. Forty-four types of systems falling in eleven categories were 
considered and are described in table 13. It can be seen from this table that 
the diverse elements making up the various systems were highly eclectic and 
ranged from torque summed electric motors through infinitely variable traction 
transmissions to Integrated actuator packages. However, each of the eleven 
categories was characterized by certain specific functional elements arranged 
in a specific sequence as follows: 

Category Characteristic 

1. Power Inverter - Bidirectional Electric Motor - Power Hinge 

2. Power Inverter - Bidirectional Electric Motor - Screwjack 
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3. Power Inverter - Torque Summing Bidirectional Electric Motor - Power 
Hinge 

4. Power Inverter - Torqua Summing Bidirectional Electric Motor - 
Screwjack 

5. Power Inverter - Bidirectional Electric Motor - Eccentuator 

6. Power Inverter * Torque Summing Bidirectional Electric Motor - 
Eccentuator 

7. Infinitely Variable Traction Transmission - Unidirectional Electric 
Motor - Power Hinge 

8. Infinitely Variable Traction Transmission - Unidirectional Electric 
Motor - Screwjack 

9. Power Inverter - Dynavector 

10. Power Inverter - Bidirectional Electric Motor - Anti Jamming Gearbox 
Arrangement 

Jl. Integrated Actuator Packages 

A discussion of each of the more Important elements making up the various 
systems follows. 

6.1.1 Power inverter . - The power inverter used for most of these appli- 
cations consists of a controller and a power handling device. The function of 
the controller is to accept input signals from the flight control system 
(i.e., from the pilot and/or the central air data system) and deliver a 
control signal to the power handling device (usually an inverter) which latter 
sig': 9 .! has been modified by feedback data from the Inverter itself and from 
the actuator output. In effect the controller interfaces with the command 
input, the primary electrical power source, the actuator motor, and an output 
function feedback device. It provides low-level signal system communication 
and high power switching and electrical control. Thus, a typical controller 
would include a junction for summing input command and feedback signals, and 
might also Include such additional features as motor current limiting and 
pulse width modulation (PWM) to control motor speed and torque as a function 
of the sensed error amplitude. The controller would employ all-digital 
techniques and would be based on the use of microprocessors. The power 
handling device ' inverter) would deliver controlled power to the actuators. 

It generates a synthesized rotating field as a function of input/output 
command errors and contains commutation and current control switching logic, 
power switch driver electronics, power switches, and current limiting. The 
power switching devices may be either SCRs or power transistors. 

For the purposes of the electromechanical actuation system (EMAS) 
evaluation it is assumed that a 27C Vdc pulse width modulated inverter based 
upon liquid cooled field effects transistors (FETs) is representative of the 
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type of power inverter which would be used for all applications calling for 
this type of device. 

6.1.2 Bidirectional electric motors . - Numerous different types of electric 
motors will be used on the IDEA aircraft. However, where bidirectional motors 
are concerned, the field of selection narrows considerably and, particularly 
where the application involves meeting flight control duty cycle types of 
requirements (i.e., servomotor requirements), the field narrows to essentially 
one type of mitor. This is the rare earth-cobalt permanent magnet type motor 
based on the " inside out” type of design. Numerous studies (references 11, 

12, and 13) have consistently Indicated that this is the type of design to be 
preferred based on the following general set of advantages. 

1. Up to five times the acceleration capability of the best wound rotor 
designs at equal powc inputs. 

2. At least twice the power rate of an equal frame size wound rotor 
design. 

3. Relatively low commutation noise. 

4. Because of its “inside out" design with all significant heat rejection 
occurring in the stator, the problems associated with heat rejection 
in the rare earth-cobalt permanent magnet motor are greatly reduced 
relative to other types of motor designs. 

5. Superior stall-torque holding capability. 

The frequency response requirements of the various flight control actua- 
tion functions used on large commercial aircraft will range from 3 to 12 Hz 
Jith subsequent designs crowding the upper end of this scale. Since power 
rate, as discussed in item 2, is the major determinant of a motor’s ability to 
meet frequency response requirements, the fact that rare earth-cobalt per- 
manent magnet motors have a 2 to 1 advantage is of extreme importance. 

6.1.3 Hingeline actuators . - The hingeline actuator is one of two basic power 
devices that has been used to implement EMAS development (the screwjack is the 
second). As such, a considerable fund of development data has been generated 
to define its capabilities when operated as a part of an EMA3 system. Fig- 
ure 78 is a detailed drawing of the hingeline actuator showing it as a device 
comprised of a sun gear power input, multiple planetary spindle gears, and 
four annular ring gears. It is different from the conventional planetary gear 
arrangement in the following respects: 

0 The planetary spindle gears are free and independent - no carrier ie 
used. 

0 Many spindle gears are used to distribute the load into the ring gear. 

• Two reaction ring gears are positioned on either side of the output 
ring gear and thus the tangential tooth loads in the center mesh are 
reacted, in a balanced fashion, by the outer meshes. 
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• Two radial reaction plain rings are provided on each side of the 
central mesh to radially preload the spindle gear-ring gear meshes and 
to react the radial component of the gear mesh loads, as fed through 
the spindle gears, in a balanced manner. No planet support bearings 
are used. 

• The “two-tooth-difference” between the “drive" and “driven" members, 
provides a very high harmonic drive type gear reduction. 

• It has a very high effective torsional stiffness. 

6.1.4 Screw jack . - The screwjack is the second of the two basic power trans- 
mission types considered for the EMAS system. The primary advantage of the 
screwjack is that it can act as a direct replacement for a hydraulic actuator. 
It is usually able to be installed in the same location and use the same end 
attach points as a hydraulic actuator. There are three basic types of ball 
screw devices, the screw thread type, the recirculating ball type, and the 
Transrol roller type. The screw thread type was eliminated from consideration 
for the purposes of this study because its efficiency is poor and it is only 
satisfactory for extremely low power functions in airplane applications. The 
roller type has exceptional load carrying capacity at the expense of some 
envelope penalties. The ball screw type is the most flexible and versatile 
and has by far the most development background behind it so it was used as the 
basic power interface where a linear actuator was indicated. Although ball 
screws can be designed with various degrees of end freedom, most airplane 
applications demand spherical bearings at both ends of the actuator. To meet 
this condition the so called “swallowed screw” design must be used exclu- 
sively. Therefore, "swallowed screw" designs similar to that shown in 
figure 79 were used for all ball screw applications in this study. 

6.1.5 Torque summing bidirectional electric motor . - Torque summing can be 
accomplished in any one of at least three ways: 

1. By using multiple motors geared to a common shaft. 

2. By using multiple motors mounted linearly along the hingeline so as to 
have a common shaft. 

3. By using multiple torque summing in which multiple windings in the 
stator, powered by different systems, drive a common multipole 
permanent magnet rotor. 

Of the three approaches, approach #1 is the most versatile and it fits 
into various envelopes, but is the heaviest and the least efficient. Approach 
it! is intermediate, having a long/ inflexible envelope and a weight between 
apptoaches it 1 and #3. Its power transmission efficiency is better than 
approach it 1 and it is on a par with approach 63. Approach it 3 is also inflex- 
ible in envelope and tends to be large in diameter although less than 
approaches it 1 and it 3 in total volume. Approach it 3 is the lightest of the 
three approaches by 10 to 20 percent. Because of its "intermediate" status 
approach #2 was eliminated from serious consideration in subsequent trade 
study activities. 
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6*1*6 Eccentuator * - The eccentuator is a relatively new and interesting 
approach to the actuation of control surfaces* This actuation method is a 
development of Vought Aircraft and consists basically ox a simple bent beam. 
The beam has kinematic mechanizations such that the output end (attached to 
the control surface) moves through an angular deflection in a plane, while the 
input half is given a compound nutating type of rotation to ensure the planar 
output motion* Figure 80 is a schematic illustration of the bent beam showing 
its possible motions with and without nutation. T t can be seen in figure 80 
that, if a beam with a bend anglfe of theta is given a rotation of 180 degrees 
at its input end about its own axis it will generate an output deflection of 
2 theta, however, the output end does not move in a plane which would make it 
impractical for moving a control surface. If a carrier is provided, as shown 
in the center of figure 81, and the input end of the beam is driven by this 
carrier, the output end still moves in a circle. However, if the beam is 
geared to the carrier in such a manner that the beam rotates 180 degrees 
clockwise as the carrier rotates 180 degrees, counterclockwise, the output 
motion then becomes planar and the deflection jumps to 4 theta. This is the 
principle of the eccentuator. 

Figure 81 shows the eccentuator as it would be installed to operate a con- 
trol surface* It shows the control surface's hinge line passing through the 
spherical bearing at the center of the bent beam. It shows the extremes of 
control surface deflection and it also shows the beam at mid travel (i.e., 
neutral for most control surfaces). Figure 82 shows th 2 mechanical advantage 
characteristics of the device. It shows a mechanical advantage of 9.51 at 
neutral and infinity at 90 degrees each side of neutral. It should be noted 
that the plot shown in figure 82 is based on a beam bend angle (theta) of 
6 degrees. Studies have shown that the maximum practical bend angle is 
7.5 degrees and that 6 degrees ic more nearly an optimum. Without going into 
a detailed analysis, the reason that six degrees is about optimum can be 
understood intuitively. At neutral (trail), the air loads are essentially 
zero and the mechanical advantage is 9.51, i.e., higher than it needs to be. 

At full deflection the air loads are maximum and the mechanical advantage is 
infinite; also higher than it needs to be. It is apparent that at some point 
in between the air loads and hinge moments match. For the 6 degree beam bend 
angle this point is about 60 degrees each side of neut *al or at a mechanical 
advantage of 19.02. As the bend angle is increased the neutral mechanical 
advantage decreases quite rapidly (a 7.5 beam bend angle drops the mechanical 
advantage at neutral to 7.6) and all mechanical advantage values each side of 
neutral decrease proportionately. In the case of a 7.5 degree beam bend angle 
the matching point would move in to 45 degrees each side of neutral and the 
mechanical advantage would drop to approximately 10. Thus, a 1.5 degree 
increase in bend angle above optimum would cut the effective mechanical 
advantage nearly in half. 

An optimally designed eccentuator (i.e., with a 6 degree beam bend angle) 
lias several major advantages over other actuation approaches as follows: 

• It is potentially 81 times stif*er than a corresponding hydraulic 
actuator • 
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KINEMATICS 

• 0 - BEAM BEND ANGLE 

• 180° CLOCKWISE ROTATION OF BEAM 

• 180° COUNTERCLOCKWISE 
ROTATION OF CARRIER 

• RESULT: PLANAR MOTION OF 
FLAP ENO OF BEAM THRU ANGLE 
FOUR TIMES GREATER THAN 0 




Figure 80. - Operating principle of eccentuator. 


• It will adapt to thin wings at least as well as a hingeline actuator 
and much better than a hydraulic actuator. 

• It is potentially the simplest and most reliable actuation approach. 

• Its output mechanical advantage characteristics tend to match typical 
control surface airload curves better than hydraulic actuator 
kinematics and much better than hingeline actuators. 

• It has inherently low inertia and potentially very high frequency 
response capabilities around neutral. 

The eccentuator however has some definite disadvantages relative to other 
actuation techniques. These are listed as follows: 

• Its output deflection, when direct connected to the surface, is low for 
meeting the deflection requirements of most control surfaces (i.e., 24 
degrees for the optimum 6 degree bent beam versus 60 degrees for a 
typical control surface). 

s It will not blowback from the extreme deflected position in the event 
of a power system failure because of its infinite mechanical advantage 
at that position; for the same reason, it cannot be back driven by 
another system. 








Figure 81 . 
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Figure 82. - Inherent mechanical advantage of eccentuator. 


• When it operates In the high mechanical advantage area Its ability to 
meet surface rate requirements will be seriously degraded. 

• It has little development or operational background behind it. 

6.1.7 Infinitely variable traction transmission . - An infinitely variable 
traction transmission is a mechanical device which transmits power by means of 
fluid shear in the mechanical Interfaces between two highly loaded rolling 
contact surfaces. Figure 83 shows a simplified schematic of the "differential 
toroidal" version of this type of transmission. This unit will accept uni- 
directional input rotation and, using a small steering force on the steerable 
rollers, it can change the output from approximately half input speed, in one 
direction, through zero to half input speed, in the other direction. When 
interposed between between a motor and a hingeline actuator (or a screwjack), 
the infinitely variable differential toroidal transmission (1VDTT) becomes a 
mechanical servo. It has Been limited service as a generator constant speed 
drive and has demonstrated the ability to meet flight control frequency 
response requirements. 

Electrically, the 1VDTT has the main advantage that the rnoto.: can run at a 
constant (and very high) speed thereby avoiding the need for the motor rotor- 
inertia to be constantly accelerated and decelerated from a zero rpm con- 
dition. This device aloo bypasses another nagging problem constantly en- 
countered by EMAS of "holding loads”, since when the motor is rotating at 
essentially a constant speed (when the output is "holding" at zero rpm), it 
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INPUT DIFFERENTIAL SLAVE CONTROL RING INPUT 

TOROID ROLLER CAGE TOROID (STEERING INPUT) TOROID 



FEATURES 

• INPUT TOROIDS DRIVE BOTH ROLLERS 

• STEERING ROLLER DRIVES SLAVE AT 
REDUCED/INCREASED SPEED 

• SLAVE DRIVES (INPUTS) FIXED 
ROLLER 


• CAGE IS NULL WHEN INPUTS 1 AND 3 
TO FIXED ROLLER IRFM) ARE SAME 

* DIFFERENTIAL INPUT TO FIXED RGLLFR 
CAUSES MOTION (OUTPUT) 


Figure 83. - Traction drive mechanical servo. 


sees the holding load as a dynamic load, instead of a stall load. There are 
not therefore the high current flow and heating problems associated with 
"stall" operations. The IVDTT is also an Inherently high gain stiff trans- 
mission. When coupled to the relatively high gear reduction characteristic of 
hingeline actuators or screw.^acks, It essentially becomes independent of 
output load inertial effects. 

In contrast to its many advantages, the IVDTT Is a complicated device and 
It uses numerous high precision parts; more pertinently. It requires extensive 
development before it can be considered as a viable FCS EMAS. 

6.1.8 Dynavecto r. - The dynavector Is in the genealogy of the harmonic drive: 
to understand the first, one must understand the second. The harmonic drive, 
shown schematically in figure 84, consists of three primary elements. 

• A circular 6pllne (thlckwall ring gear) 

• A wave generator (an oval rotating element) 

• A flexspllne (a flexible spline deflected Into engagement with the 
teeth on the circcxar spline by the wave generator). 

The uniqueness of the harmonic drive derives from the fact that the 
flexspllne has one or two less teeth than the ring gear (the circular spline), 
with which it engages. As a consequence the harmonic drive can effect very 
large speed reductions in one stag;;. Thus, with 202 teeth In the circular 
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Circular splint 
A rigid thick wall ring 
with internal glint 
teath. It is a fixad or 
rotating output 
drive element 



Wave generator 
An elliptical ball bearing 
assembly which includes an 
oidham type shaft coupling. 
It is the rotating input 
drive element 



Flexspline 

A non-rigid cylindrical thin 
wall cup with two less spline 
teeth and on a smaller pitch 
diameter than the circular 
spline. It is a fixed cr rotating 
output drive element 
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Figure 84. - Harmonic drive. 
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spline and 200 on the flexspline the ratio is 200/(202*200) • 100:1. In 
effect, the harmonic drive is a special form of eplcyclic gear train in which 
very large g^ar red'ictlons are possible in a single stage. 

The dynavector is a Bendlx development whose design is ased on the har- 
monic drive principle. It uses the eplcyclic gear concept to effect direct 
hlngeline-type actuation of a control surface or other loads. Unlike the 
eccentuator, it is not limited in rotation and it can be adapted to digital 
(stepper-type) control in that the movement of the output shaft can be 
effected in discrete Increments. The dynavector derives it6 name from the 
fact that a diametrical force (a force vector) urges the flexspline into 
engagement with the circular spline, causing the latter to rotate smoothly, or 
in small incremental steps, through 360 degrees or more of rotation. The 
dynavector has been adapted to pneumatic, hydraulic and electrical power 
sources with a greater portion of the <v:.elop nt work being expended on the 
first two (hydraulic and pneumatic). 

Figure 85 is a schematic illustration of the dynavector showing it to be 
comprised of three basic power transmission elements: 



Figure 85. - Dynavectot actuator. 
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• Ring gear 

• Ground gear 
a Output gear 

' s an actuation device the dynavector tends to be compact in length, but 
relatively large in diameter (i.e., pancake design). Figure 86 la a view of 
the three transmission elements in the assembled state. This particular 
dynavector is hydraulically operated through the medium of the pressure and 
exhaust ports located in juxtaposition to "displat<.uent chambers”. In opera- 
tion, a force vector is created by pressurising the displacement chambers on 
one side, while venting the displacement chambers on the other side. Rotation 
is imparted by sequentially pressurizing tr.e vented (exhaust) chamber adjacent 
to a previously pressurized chamber, while simultaneously venting the dia- 
metrically opposite pressurized chamber. This commutating action causes the 
force vector to rotate through an arc (angular width) equivalent to one dis- 
placement chamber. As the force vector rotates, the ring gear rotates at the 
same speed, driving the output gear and shaft in the opposite direction at a 
reduced speed and increased mecha^-cal advantage equivalent to the difference 
in the pitch of the meshing tneth. For a typical 30/32 teeth meshing differ- 
ence between the ring and o' iut gears, the reduction would be 15:1. At any 
one time, half of the displacement chambers are pressurized, whl’e the other 
half are vented. This result.) in an jrbiting-type motion of the ring gear. 


GROUND GEAR 
ANO HOUSING 


Pj VECTOR 
RING GEAR 


OUlPUf GEAR ANU SHAH 

P 2 VECTOR 



DISPLACEMENT 
CHAMBER 

CAPTURED VANE 
?2 PORT (FIXED IN END PLATE) 


DISPLACEMENT CHAMBER 
ADMISSION PORT 
P, PORT (FIXED IN END PLATE! (IN RING GEAR) 


Figure 86. - Dynavector: hydraulically actuated. (Courtesy Bendlx.) 
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causing a tooth engagement between the internal teeth on the ring gear with 
the external teeth on the output gear which is displaced 90 degrees from the 
force vector. 

Although a hydraulic dynavector is not of direct interest to an EMAS based 
system! an electrical version of a dynavector has also been adapted to produce 
the rotating force vector. In this case f the force vector is generated by 
coils i which are disposed circumferentially around the outside of an armature) 
that is integral with vhe ring gear. Motion in this type of dynavector is 
created by commutating the coils in the correct sequence in exactly the same 
manner as the pressurized/ vented chambers were commutated in the hydraulic 
version* This causes a rotation of the force vector at a rate determined by 
the commutation rate of the coils* In this electrical version the rotating 
field can be digitally controlled by sequential energization of the coils, or 
stepless smooth rotation can be developed by use of a polyphase-winding that 
produces a usoldally changing rotating field* Figure 87 is a schematic of 
£ electricity powered dynavector. 

ihe dynavector is a relatively simple device using, as it does, relatively 
few parts to get from a raw power input to a controlled power output. T t 
appears to have the following advantages: 

• High reliability 

• High torque-to- inert ia ratio 

m High stiffness 

m High dynamic performance* 

The high reliability derives from the fact that there are no high tooth 
loadings and the rubbing velocities are approximately one tenth of con- 
ventional gears* The high dynamic performance derives from the fact that, 
unlike an electric motor with high rotor inertia due to high speeds, the 
dynavector has no mass rotating at high speed. 

The disadvantages of the dynavector in its current state of development 
are that its specific weight (kW/lb) is relatively low and its pancake 
configuration inhibits its installation in many applications such as thin 
wings* Also, the power and torque levels that are required by primary flight 
control surfaces in larger sized transport aircraft are high and somewhat 
beyond the capability of present dynavector designs* Responding to this, 
Bendix initiated a new design program incorporating new design approaches to 
overcome k hese shortcomings* Unfortunately, as a result of cutbacks this 
program, as well as all other work on dynavector, was terminated. For these 
reasons, even though dynavector ?.nd similar high torque low speed electrical 
devices (torquers) may have excellent long term promise, they were not 
considered viable for the IDEA so they were dropped from further consideration 
for this study* 

6.1.9 Integrated actuator packages * - Integrated actuator packages (lAPs), 
are self-contained power modules incorporating hydraulic or pneumatic 
interfaces, but still operating electrically. lAPs can be considered 
for flight control and surface actuation but they were eliminated from 
selection for the following reasons: 
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Figure 87. - Dynavector 11 



• They were less efficient since au additional different type power 
interface was always involved. 

• They were heavier because of the additional power interface components. 

• They had the external appearance of an electromechanical actuator, but 
Internally they employed hydraulics to pneumatics. Thus, in 
maintenance support hydraulic and/or pneumatic technicians would still 
be required. 

In view of the above, the 1AP was not considered as a strong candidate for 
the FCS EMAS or other applications. 

6.1.10 Utility function actuation . - The utility functions considered during 
the study were as follows: 

• Ma in Landing Gear Retract Actuator 

• Main Landing Gear Door Actuator 

• Main Landing Gear Door Lock Actuator 

• Main Landing Gear Down Lock Actuator 

• Ma in Landing Gear Truck Leveler Actuator 

• Main Landing Gear Brakes 

• Main Landing Gear Retract Actuator 

• Nose Landing Gear Uplock Actuator 

• Nose Landing Gear Steering Actuator 

• Trailing Edge Flap Actuation 

• Leading Edge Flap Actuation 

• Thrust Reverser Actuation 

• Tail Skid Extension 

With the exception of no6e wheel steering (which can be a simple open loop 
servo control), almost all non FCS actuation functions could employ a highly 
reliable/ rugged squirrel cage induction motor as the power source. For land- 
ing gear actuation various forms of geared rotary actuators were considered 
with the rotary actuator powering a trunnion and/or drag-link knuckle. In 
each instance, however, the geared rotary actuator proved heavier and more 
demanding of space so the simple expedient use of a screwjack Interface 
appeared more feasible. 

The flaps and thrust reverser presented a somewhat different circumstance 
since the operating mechanism for each of these functions is already powered 
by a hydraulic or pneumatic motor. Therefore the more simple and direct 
approach was to use an electric motor to drive a mechanism that was already 
well proven and developed. 


181 



’ vk • > 


6.2 IDEA: EMAS Applications 

6.2.1 Flight control actuation . - Referring to table 11, four categories were 
eliminated during the preliminary evaluation phase early in the trade study. 
These were categories 7, 8, 9, and 11. 

The following were therefore the viable candidates for the IDEA. 

6.2.2 Eccentuator . - While the eccentuator provides many advantages, its main 
disadvantage was its limited output deflection. To evaluate the deficiency 
several geometric configurations were considered Including one to install two 
eccentuators in series. This provided additional deflection angles up to plus 
or minus 48 degrees; also its double hingeline gave an interesting camber to 
the wing cross section when fully deflected. Driving the second eccentuator 
and achieving the required nutating action was however a problem that could 
not be overcome. A second approach was therefore pursued and this appeared 
very practical. In this case, the surface hingeline was moved aft of the 
eccentuator's ball pivot as shorn in figure 88. This was adapted to the IDEA 
airplane's outboard aileron chordal cross section at approximately midspan of 
the aileron where it can be seen that the eccentuator fits nicely within the 
wing and control surface mold lines. This configuration places the control 
surface hingeline (aileron pivot point in figure 88) 4 Inches aft of 
eccentuator' s ball pivot and give +20° deflection. 

Moving the control surface's hingeline aft of the eccentuator's ball pivot 
does reduce the overall mechanical advantage of the system in a manner 
somewhat analogous to effect of increasing the eccentuator beam's bend angle, 
but the end effect is different. Increasing the beam's bend angle to achieve 
a higher output deflection distorts the mechanical advantage curve so the 
matching point between load and mechanical advantage moves to a much lower 
value, however, while moving the hingeline aft results in a higher load on 
the eccentuator's output, the matching point remains the same in terms of 
mechanical advantage. 

Figure 89 also shows the gearing necessary to achieve the nutating action 
required to implement the eccentuator principle (see figures 89 and 90). 
Although not shown in figure 88, the electric motor working through a 
planetary gear train meshes with the bull gear shown in the figure. This gear 
performs the function of the carrier shown in figures 89 and 90. As it 
rotates in one direction it causes the pinion gear, which is constrained by 
the reaction ring gear, to rotate in the opposite direction. The pinion gear 
is keyed to the eccentuator beam and thus, the beam is forced to rotate in he 
counter rotating manner necessary to achieve the double deflection planar 
motion of the output. The torque at the bull gear input can be very low since 
there is a gear reduction/mechanical advantage of approximately 200:1. 

Figure 89 is a plan view schematic of the outboard aileron installation. 

It shows the eccentuator bull gear being driven by two Independent 
motor/gearbox units. Each of these motor/ gearbox units has its own controller 
and is powered by a different electrical system. Each motor/gearbox unit is 
capable of meeting stall load at the design point and at an incipient motor 
stall speed of 17,000 rpm. During normal operation the motors share load and, 
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(HINGELINE) 

Figure 88. - Eccentuator installation in outboard aileron. 


thus are very lightly loaded for most of their operational life. Figure 89 
also shows some of the major performance parameters of the eccentuator system 
and shows a projected weight of the system as 113 lb per surface (226 lb per 
airplane). This is an excellent system weight, but it is heavier than a 
hingeline ''state of the art" actuation system. 

6.2.3 Antijam arrangements . - Originally it was thought jam- tolerant EMAs 
would prove prohibitive in terms of weight: however, as the study progressed, 

it appeared this was not the case. Some features of one jam tolerant flight 
control actuator are shown in table 14. 

A rather detailed analysis of the application of jam tolerant actuators to 
the outboard ailerons was applicable to most other flight control applica- 
tions. At least three practical approaches emerged. Figure 90 shows the 
functioning of one of the more favored approaches whose features are listed in 
table 14. A cam and push rod move the surface in much the same manner as a 
conventional hydraulic actuator except that the cam can be operated by a 
central gear train with the outer gear train locked, or by the outer gear 
train with the central gear train locked. The "primary" motor normally drives 
the central gear train but should it jam electrical logic would lock the brake 
on the primary motor and the back-up motor would drive the surface. 

In this configuration there are only three points where a jam can occur 
that will lock the whole actuator: the cam and rod end bearings at each end 

of the pushrod and the bearings which isolate the cam and gear trains from the 
fixed housing. The probability of failure in the cam and pushrod end bearings 
was considered about equal to that of the rod and head end bearings of a 
conventional hydromechanical actuator. Similarly the probability of a jam in 
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•TORQUE AT BULL GEAR - 87,600 in lb/200 RATI0/.85 EFF. 

- 515.29 in-lb 

•TORQUE AT MOTOR PAD - 515.29 in-lb/17.14 RATI0/.94 EFF. 

- 31.98 in-lb 

#• 

MOTOR POWER - 31.98 in-lb * 17,000 rpm . 6 44 ^ OUTPUT 
84483.9 

INPUT CURRENT - 6.44 kW/.85 EFF./.27 - 28.06 amp 

TOTAL WEIGHT - 32 + 2(6 ♦ 23 + 11.5) - 113 lb 

•INCIPIENT STALL BEAM ROTATED ±60° FROM NEUTRAL 
•‘INCIPIENT STALL MOTOR SPEEO 


Figure 89 


Eccentuator schematic and characteristics (outboard aileron) 





Figure 90. - FCS EMAS candidate with antijam features. 


the fixed housing support bearings was considered to approximate the 
probability of a jam in the piston of rod areas of a conventional hydro- 
mechanical actuator. 

Figure 91 shows an installation envelope of an antijam arrangement 
designed specifically for the outboard aileron of the IDEA airplane by MPC 
Products Corp. This envelope is based on a detailed design and analysis which 
gave it a high credibility and provided a basis for sizing and evaluating its 
application to the spoilers, the rudder, and the Inboard ailerons as shown in 
table 15. It can be seen in figure 91 that the unit fits easily in the space 
available behind the rear spar and that it operates the aileron using the 
existing surface hingelines and aileron arms. A detailed analysis of the four 
bar linkage formed by the eccentric, the pushrod, and the aileron lever arm is 
shown in table 15. It shows the instantaneous torques, lever arms, and link 
loads at various surface positions and shows that the mechanical advantage of 
the linkage system matches the aerodynamic load characteristics of the 
surface. 

The anti jam mechanization shown in figure 91 has a number of distinct 
advantages relative to conventional hydromechanical or hingeline actuators. 

The first is that it uses a relatively large diameter eccentric bearing on 
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TABLE 14. - FLIGHT CONTROL EMAS CHARACTERISTICS - ANTI JAM 
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ACTUATION 

FUNCTIONS 

PARAMETERS 1 

SURFACE/SYSTEM PERFORMANCE 1 

SURFACE RATE (DESIGN) (DPS) 

LOAD (DESIGN) (FT -LB) 

STALL LOAD (FT -LB) 

POWER REQUIRED 9 SURFACE (KW) 
BANDWIDTH <? +/- 0.1 DEG -3 db (HZ) 
AMPLITUDE (DEG) 

ACTUATOR (OUTPUT DRIVE) 

NUMBER REQUIRED PER SURFAC2 
NUMBER REQUIRED PER AIRCRAFT 
TYPE 

EFFICIENCY (X) 

GEAR RATIO (X:l) 

WEIGHT (LB) PER SURFACE 

MOTOR 

NUMBER REQUIRED PER SURFACE 
NUMBER REQUIRED PER AIRCRAFT 
TYPE 

SPEED (RPM) NO LOAD 
SPEED (RPM) DESIGN 
DESIGN OUTPUT POWER (KW) 

MAXIMUM POWER (KW) 

CURRENT LIMIT PER SURFACE (AMP) 
WEIGHT (LB) PER SURFACE 

CONTROLLER 

TYPE 

CURRENT RATING (AMP) 

NUMBER REQUIRED PER SURFACE 
NUMBER REQUIRED PER AIRCRAFT 
VOLUME (CUBIC INCHES 
WEIGHT (LB) PER SURFACE 

TOTAL WEIGHT OF FUNCTION PER A/C 
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AJA Antl-Jaa Type Actuator 

S J Ball Screw Jack Actuator 

RE PM 10 Rare Earth Permanent Magnet Motor - Inside Out Design 










TABLE 15 


FOUR BAR LINKAGE FOR OUTBOARD AILERON ACTUATION 
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T2 
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El 
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(lb) 
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42.513 
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24,169 

-18 

75. 
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77,294 

20,796 
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-16 
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46.376 

16,411 
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. . 
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-8 
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86.652 
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0 
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18,006 

0.843 
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MAX. ACTUATOR TORQUE 9 ABOUT 9 - -18° 
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-in. (APPROX 
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Figure 92. - Schematic arrangement for Inboard and outboard 
ailerons, and rudder actuator systems. 


each end of the gearbox to translate output rotation Into dual redundant 
control surface Inputs. The electric motor, which mounts to the eccentric, 
drives the gearbox with an input shaft that is encompassed by the eccentric 
bearing. This dictates a large sized bearing and the use of such a large 
bearing enhances gearbox integrity by minimizing bearing stresses and ensuring 
high stiffness. Second, most all primary control surfaces can be driven by 
adjusting the eccentric throw and rotation to accommodate the requirements of 
a particular control surface. 

An inherent feature of this configuration is that the over-center toggle 
action of the EMA is ideally suited to holding contlnous steady state loads as 
in the case of the spoilers where there is a "sucking" hinge moment trying to 
deploy them during flight. Also, it ameliorates a problem endemic to 
hingeline actuators which react continual type low amplitude/high frequency 
vibrations. The Electro-Mechanical Power Hinge Actuator (EPHA) avoids this 
problem by the presence of at least a 3:1 ratio between the eccentric and the 
surface rotation. This minimizes local fretting wear and backlash. With the 
exception of the horizontal stabilizer, using linear actuators, all FCS 
actuators are candidates for anti-jam features of the type described. 

In addition to the support provided by MPC Products Corp., Sundstrand 
Aviation Division of Sundstrand Corp. also supplied assistance. Sundstrand' s 
approach was built around planetary hingeline actuators similar to those which 
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have been extensively developed by AlResearch. In Sundatrand' s approach, 
however, dual load paths (Inverter, cable, motor and lnpu haft) from a 
single power source were provided Into each end of each hingeline actuation 
unit (see figure 92). No more than one hingeline power unit was powered by a 
given power source. Each load path was capable of meeting 100 percent load 
requirement continuously at somewhat reduced life. Under normal load con- 
ditions with less than SO percent load on each load path, and most generally 
less than 12 percent, the potential life and reliability of each load path was 
extremely high. Using the Sundstrand approach as a basis and modifying It 
through the addition of a package of torque sensors, dog clutches, and brakes, 
Lockheed succeeded In creating a system which, in most Instances equaled or 
exceeded the reliability (Including antijam tolerance) of the antijam systems 
discussed In the previous paragraphs. This revised system approach was 
applied to most of the major flight control functions and found to be the most 
reliable and to have the lightest overall flight control system weight by 
131.3 pounds (see tables 14 and 16). 

The closest competitor In terns of reliability, weight and cost to the 
modified Sundstrand load sharing approach, was the antijam approach suggested 
by MPC. As pointed out In the earlier discussion the antijam approach Is not 
completely jam free, nor disconnect free for that matter, but has about the 
same jam/ disconnect potential as a conventional hydromechanical linear 
actuator. Since the hingeline actuator load sharing approach has better load 
path redundancy down to the actuator Itself than does the anti jam approach and 
since, in dual and triple redundant applications, the hingeline actuator 
operates at less than 30 percent duty cycled load compared to the antijam 
actuator’s 100 percent, it was felt that the overall reliability and 
ant ijam/ disconnect capabilities of the load sharing approach was at least 
equal to and probably better than the antijam arrangement. For this reason 
and its weight advantage, the load sharing hingeline approach was selected in 
the IDEA airplane. 


6.3 Identification of Critical Technologies 

In common with the concern for the reliability of the electric power 
distribution systems and the back-up emergency power system for flight 
critical FCS loads, there must be equal concern for the reliability of the 
electro-mechanical actuators that will replace the hydromechanical actuators. 
Evaluation and development of alternative EMAS approaches is recommended to 
NASA for further technical direction and support. 

Specifically, the prospect of actuator jams has been cited as more likely 
in the electric actuator because of the use of planetary gear reductions and 
the concern for problems of a broken tooth or a mechanical seizure that could 
stall a control surface and any actuators connected to It. The present 
competition for the electric actuator Is the hydraulic jack which is a simple 
power module and one that has Intrinsically high reliability. As a conse- 
quence, designers have seldom considered the prospects of a hydraulic ram 
seizure, but there are provisions to bypass the ram in the event of a jammed 
servo-control valve. One of the few exceptions to this policy might be design 
approach to the quad-redundant hydraulic jacks on the horizontal stabilizer of 
Lockheed's L-1011 airplane. Here each of the jacks has a thrust capability to 
operate the stabilizer, and the stall thrust-capability is such that if one 
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jack does jam t the other three can physically break th^L jack away from Its 
attachment point to structure* 

From the above It Is clear that mechanical jams In electric actuators can 
take two forms; address the case where multiple actuators are mechanically* 
summed onto a control surface , and where a single actuator powers the control 
surface. In the latter configuration a separate "back-up” motor can be used 
to control the surface and some novel method must be Incorporated to bypass 
the jam. Such an approach was designed by MPC in the course of this study, 
and it was described in the EMAS section of this report. The multiple 
actuator configuration dictates a different and more critical solution, since 
in this case, one actuator failure can abrogate the concept of redundant 
actuation of the single control surface* The solution is further complicated 
by the fact that once an actuator jams, it effectively stalls the other 
actuators connected to the surface: there must therefore be a nonamblguous 

method of disci imlnatlng, in real time, which actuator is jammed and how to 
bypass it. One favorable aspect of the multiple actuator approach, however, 
is that one or more of the other actuators can continue to operate the control 
surface once the faulty-actuator has been bypassed. This at least avoids the 
need for a separate backup motor or actuator. Mechanical-summing is prefer- 
able, in many cases, to redundant control surfaces. For example, if a split 
rudder is used on the premise that one section can be stalled in a deployed 
position and the other section can offset its yaw-moment, then the surface 
area of the rudder must be increased to provide the same degree of yaw 
control. On the other hand, the redundant actuator concept does not have this 
disadvantage. 

To summarize, NASA's further support of FCS-EMAS development is recom- 
mended and innovative approaches should be encouraged that would permit single 
and multiple actuators operating critical flight control surfaces to by 
bypassed in the event of mechanical jams. A corollary of this is that some 
unambiguous and reliable method should be developed to discern and bypass the 
faulty actuator where two or more are on a control surface. 


7. ICING PROTECTION SYSTEMS 

Ice protection in the IDEA involves the engine and wing ice protection 
systems. Where hot pressurized air was used in the baseline airplane, 
electric ice protection systems are used in the IDEA. Typically there are two 
candidate forms of ice protection: 

• Electrothermal 

• Electro impulse 

The former is the more conventional type of ice protection in which 
electric heat is applied to the lips of engine cowls and to the leading edge 
of the wings and/or the empennage. In some large aircraft there is a higher 
degree of tolerance to ice accretion on the wings and so these aircraft are 
not so critical of ice protection as are the smaller aircraft. In the L-I011 
and the Baseline hot engine bleed air is ducted Into the wings and applied 
through an extensible/ retractable tube to the wing leading edge slots. Hot 
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engine air is also led forward to the engine cowl lips, and a distributor ring 
around the forward periphery of the engine cowl is used to Inject the hot air 
onto the forward leading edge of the cowl. Figure 93a and figure 93b are 
typical of this type of ice protection. 

For the IDEA an electro impulse deicing system was selected both for the 
leading edge slats and the engine cowl lips. This electro impulse deicing 
system (EIDS) has its origin in Soviet patents, and some seven western 
countries, including the U.S.> have investigated licensing agreements. The 
Russian EIDS has been tested in an Ilyushin 18 turboprop commercial airplane 
and in the Ilyushin 76 turbofan cargo transport. The Lockheed-Calif ornia 
Company solicited specific technical data from the USSR on the EIDS in 1972 to 
permit a more in-depth evaluation of the technology but it was not available, 
although the Soviet engineers did express a willingness to install El equip- 
ment in any structural test specimen that might be supplied by Lockheed. 
Contacts were also made with Lucas Aerospace Company in the UK who had worked 
more closely with the Russian engineers, since this company was seriously 
considering licensing prospects in that same near time frame. Based on the 
data available on the Ilyushin aircraft experience and supplementary informa- 
tion from Lucas Aerospace, the Lockheed-Cal if ornia Company initiated its own 
in-house evaluation program. Several U.S. patents have been issued or are now 
pending, including some that address the application of the EIDS to composite 
type structures. Since eddy current conduction is not possible with composite 
wings, 'driver 1 (conductive plate) can be attached to the undersurface of the 
leading edge of the skin to permit eddy current induction. The alternative is 
a patented system wherein two electromagnetic coils are mounted in close jux- 
taposition, with one coil attached to the inside of the nonconduct ive skin and 
the other to the air structure. These two coils are wound in phase opposition 
so when subjected to the high discharge currents from the capacitors, the 
antipolar magnetic fields create a sharp repulsive force between the coils. 
Some minimal testing was accomplished at Lockheed on this modified EIDS and 
the results were encouraging. Using a ballistic pendulum as a force monitor 
the efficacy of the dual-coil approach was verified and it was found that the 
electromechanical forces produced were superior to the eddy current type EIDS. 
This superiority resides largely in the efficiency differences of the two 
systems: the dual-coil method is elec tromagnetically superior to the basic 
EIDS approach since the latter relies on the magnetic fields that are set up 
by the eddy currents. Since this is a scondary induction effect that depends 
upon the specific resistivity of the metal, the dual coils make a more direct 
application of the electromagnetic force phenomenon. Tests with the ballistic 
pendulum shows a 150 percent or more improvement in the dual-coil approach 
over the basic system. A further advantage is that the total system weight is 
less, because of the higher efficiency, when the novel approach is compared 
with an EIDS, using a driver plate. 

In a further effort to explore more effective implementations of the EIDS 
technology, Lockheed pursued the concept of putting torsion into the wing 
leading edge since this seemed to have the potential for increasing the shear 
stresses In adhesive bond between the ice and the skin. Again, this was found 
to be beneficial in the limited testing accomplished. 
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The principle of the EIDS is based upon the installation of multiple 
electromagnetic coils located spanvd.se along the wing leading edge (see 
figure 94). These coils are rigidly located in proximity to the skin and 
usually positioned aft of the leading edge on the upper and lower surfaces of 
the wing leading edge. 

In operation , a transient pulse of current is applied to the coils, 
sequentially under the control of a cyclic timer. During each cycle all of 
the spanwise coils in each wing are energized, individually or in pairs. The 
electromechanlcs of the deicing principle depend upon an elastic deformation 
principle depend upon an elastic deformation being created in the skin in 
proximity to the particular coils being energized. More specifically, the 
very high current pulsed into each coil, sets up strong electromagnetic fields 
that intersect the skin and induce eddy currents in the skin as a function of 
the rate of change of flux. The magnetic fields created by these eddy cur- 
rents then react strongly with the magnetic field of the coils, with the 
result that a very sharp repulsive force is developed between the coil and the 
skin. The electromagnetic force has the effect of imparting a hammerless-type 
blow to the aluminum skin, in the localized area of the coils. As a conse- 
quence, the ice appears to M explode ,, off the surface rather than being shed 
into the free-stream airflow. 

The advantages of the EIDS are many, but the main one is that is an 
exremely economic way of deicing in terms of the electric power required for a 
given protected area. Typically this has been stated as about one hundredth 
of a conventional electrothermal deicing system. More^spcif ically the 
Russians 1 estimate a power of approximately 26 W/raeter and this has to some 
extent been confirmed by Lockheed. 

Another attractive aspect of the EIDS is that it is independent of outside 
air temperature and so the amount of electrical energy required does not have 
to be increased with very low outside air temperatures. With the electro- 
thermal deicing system the energy imparted to the protected area must be 
increased as a function of the outside air temperature. This requires 75 to 
100 kW for protecting the empennage of a fairly large aircraft, compared to 
about 1 kW for the EIDS. 


7.1 Theoretical Analysis 

In the Lockheed EIDS exploratory IRAD programs theoretical analyses were 
made of the deicing principle since it is not fully understood. The elastic 
deformation of the skin at the outset induces bending stresses in the ice and 
causes it to break up into small segments that are precipitated from the skin 
i*i a "shower type" pattern. In the process, skin shear stresses are created 
and a cohesive failure develops in the ice close to the skin or an adhesive 
failure occurs at the ice/skin interface. In the course of analyzing the 
process, however, it is clear that the conditions are highly dynamic and 
complex inasmuch as "ringing" condition is created, resulting in a transverse 
wave propagation. This is shown simply in figure 95. Evidently these char- 
acteristics match a particular set of conditions, such as the amount of energy 
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dumped Into the coll, the d<|>/dt of the magnetic flux, the physical character** 
lstlcs of the skin (electrical conductivity, thickness, rib-spacing, coll 
spacing) and the amplitude deflect Ion/ acceleration rate of the skin (due to 
electromagnetic forces). Figure 96 shows the theoretical sinusoidal bending 

i mode . 
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7.2 E1DS Testing 


The type of Ice formed can also affect the effectiveness of the E1DS, 
since the Ice accretion varies with the outside air temperatures. At tem- 
peratures just below freezing the ice accretion can be dense and strong as 
manifest by the lack of entrained air In the freezing process. In contrast, 
at low temperatures, because of entrained air, rime Ice Is deposited which 
tends to be Irregular and this is not as strong nor dense as clear Ice. There 
are, therefore, many Interdependent and Independent parameters affecting an in 
depth understanding of the E1DS process so, pursuant to this, tests were 
conducted on flat panels as well as simulated leading edge sectors. The 
purpose of some of these tests was to determine whether pure axial strain was 
effective as deformat lon/bending wherein shear stresses are developed In the 
ice/skin Interface. The former was found to be ineffective as the axial 
strain had no observable benefit In terms of reducing the adhesive bond 
between the Ice and skin. 


From the electrical standpoint tests were conducted using a variable 
voltage power supply that was able to vary the applied voltage to the colls up 
to a 4000 V level. Similarly, the condensers that were charged up by the 
power supply arled in capacity from 180 ^F up 600 |jlF and more. In each test, 
the product of the voltage and the capacitor value affected the energy 

1 2 

level In acctrd with the formula (E*^CV ) . The colls evaluated were typically 
flat spirally-wound colls (see figure 97) which possessed resistance and 
Inductance. Being air colls, there were no magnetic saturation effects, but 
the pulse rise-time and the transient ringing frequency were related to the R, 
L and C values. In the force evaluation tests made on flat panels, and the 
simulated leading edge sample, the test conditions were varied as follows: 


3000 V 50 hF 

2090 V 180 ^F 

2020 V 391 jiF 

830 V 595 piF 


225 joules 
400 joules 
800 joule 8 
205 joules 


Figure 98 is a simple schematic of the laboratory set up for the force 
measurement tests. Pulse currents into the coll were controlled by a silicon 
controlled rectifier and the load cell deflections were monitored by the 
oscilloscope. 

Based on the foregoing and the tests conducted on the 30 inch leading-edge 
specimen (figure 99) in the Lockheed Icing tunnel, it was possible to perform 
a preliminary type design of an E10S for the IDEA. The leading edge slat 
configuration and twenty-five colls (approximately 3 inches in diameter) were 
assumed to be located In each wing along with a centrally-located power supply 
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Figure 97# - EIDS: colls and coll suppport structure of leading edge 

test specimen. (Lockheed). 



Figure 98. - EIDS: schematic of force measuring tests (Lockheed). 
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Figure 99. - BIDS: leading edge test specimen (Lockheed). 


source. Electrolytic capacitors to provide a 800 V 825 |aF energy source were 
also located in each wing for an approximate weight of 4.5 pounds/wlng. Other 
components of the system consisted of the controller and miscellaneous wiring. 
The estimated weight for the system was about 85 pounds/wlng, or a total of 
170 pounds. This weight is assessed as being conservative, since it was based 
primarily on the type of components used in the ln-house test program. The 
average input to each coil was assessed at about 28 watts and the total power 
per side for the E1DS was estimated at 0.5 kW. 

The conclusions to be drawn from the Soviet type E1DS are that Lhe concept 
is well founded and it has been validated by the installations In the Ilyushin 
aircraft as well as by flight tests conducted by British Aerospace in a 
BAC 1-11 in simulated icing conditions. In this airplane Bix coll pairs were 
installed on the upper and lower surface (24 total) on a 6-foot leading edge 
test section (see figure 94) on the inner portion of the right wing. Lucas 
Aerospace furnished a set of USSR supplied equipment to RAe for these tests 
and a photo-reproduction of the colls and thyristor is shorn in figure 100. 

An inflight photo of the E1DS performance simulated icing conditions in the 
BAC1-1 1 is shown in figure 101. Rolls-Royce have also conducted some detailed 
investigations into the application of the ElOs to fan cowls. 


7.3 Plans 

The foregoing experience, coupled with the analytical and Icing tunnel 
tests at the Lockheed Burbank facility, validate many of the Russian claims 
for the E1DS and so the system warrants further NASA support. There are many 
aspects to the performance of the sysLem and it is necessary to plan for a 


201 



SR produced coil and thyristor. (Courtesy British Aerospace /Lucas 





detailed investigation into It* application to any particular aircraft. Rib 
spacing, skin thickness ar.u other physical design parameters must all be duly 
acknowledged to take advantage of the ElDs. Fatigue stress is a considera- 
tion. Because of tb'j allowable low ratio of fatigue-stress to the modulus of 
elasticity, aluminum alloys may not be as suitable as other higher strength 
materials, such as tit "alum-alloys. However, t'nt specific resistivity of the 
alloy would be high and thereby tends to inhibit the induction of edd' 
currents. Consequently, a driver plate or the Lockheed approach may be 
necessary to overcome this problem. These considerations and the overall 
esoteric aspects of the ElDs merit NASA's strong support. 

8. ENVIRONMENTAL CONTROL SYSTEM 

The ECS power deman is in the IDEA are the same a f j in the baseline, but in 
this case electric power is used to drive the turbomachinery, in lieu of 
engine bleed air. 

In line with the baseline design criteria, the All-Electric Environmental 
Control System (AEECS) in the IDEA supplies 0.7 lb/min/ passenger of fresh air 
and 0.7 lb/min/passenger of recirculated air. The pressurization schedule for 
the airplane calls for the maintenance of a 6000 foot pressure cabin up to 
altitudes of 35,000 feet and not more than an 8000 foot cabin at altitudes up 
to 42,000 feet. The cabin atmosphere differential pressure is limited to a 
maximum of 8.44 psi (as shown in figure 9). Other design conditions require 
an ability to maintain a comfortable cabin temperature of 75°F with outside 
ambients down to -59°F up to +104°F: humidity conditions for ground cooling 
are equivalent to 130 grains/lb. The heating and cooling Btu/h requirements 
under different conditions are shown in table 17. 

Multiple choices for cooling are possible and they break down into a 
choice of motor driven air cycle, motor driven vapor cycle, or hybrid systems. 
Motor driven compressors (MDCs) typically provide the cabin pressurization 
needs in any AEECS design. The cooling requirement (on a hot day) is the 
major power demand on the ground while, in the high altitude cruise case, the 
power for pressurization is the major power demand (see figure 102). Cooling 
during the high altitude hot day condition with a fully loaded cabin can be 
met with ram air heat exchangers and without dynamic cooling. However, on hot 
day take-off /cl imb conditions up to altitudes of approximately 10,000 feet, 
some degree of dynamic cooling can still be required and there is the 
beginning of a pressurization demand. Like the baseline airplane, a three 
pack configuration is proposed. 


8.1 Cabin Pressurization 

Where tapping the engine compressors at the intermediate and high stages 
provided the energy for pressurization in the Baseline, a dedicated compressor 
system is necessary in the IDEA and Alternate IDEA. Electric motor drives are 
used for each of the three cabin compressors. Two types of motors are avail- 
able: a permanent magnet (SmCo type), or an ac induction motor. The former, 

while described as a brushless dc type motor, is actually an ac (synchronous 
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TABLE 17. - SUMMARY OF IDEA AIRCRAFT ECS AIR FLOW AND HEATING/COOLING REQUIREMENT (I) 
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ECS ECS 

COOLING PRESSURIZATION 

Figure 102, * IDEA ECS: cool ing/pressuriz^t ion comparison 

type) motor that requires an electronic power assembly to synthesize the 
required polyphase ac power. This ac power is created by a sequential 
switching of power transistors, that are controlled by an electical sensor 
that monitors the (motor) rotor position. In the case where the ac induction 
motor is use^ as a compressor drive, the electronic power assembly is not 
essential, but it can still be used and the control technology would be much 
simpler. However, in the Lockheed selected approach to the IDEA AEECS, the 
induction motor driven (fresh air) compressors are directly powered from the 
ac system, so the weight, size, cost and thermal management problems of the 
electronic power supplies are avoided. 

For the IDEA, a pole changing 2 speed motor and 3.2:1 pressure ratio 
centrifugal compressor with inlet guide vanes (IGVs) provides pressurized air 
for the cabin at cruise altitudes. By varying the 1GV angles end motor 
speeds, it is possible to maintain a constant air mass flow over the operating 
altitude range of the IDEA. 

For maximum efficiency in cruise, the compressors operate with the IGVs 
fully open. The induction motors run \i approximately 46,500 rpm (48,000 rpm 
inus 3% si' j) with the three-phase 400 V °00 Hz power at the cruise engine 
speed. The compressor, which uses a titanium rotor and steel scroll housing, 
has a weight of approximately 75 pounds. The motor weighs approximately 
100 pounds • 
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8.2 


Cooling System 


The AEECS concepts considered for cooling the cabin included motor driven 
air cycle, vapor cycle, air cycle/vapor cycle, hybrid cooling systems, plus 
variations of these systems. While a large number of configurations are pos- 
sible, many have already been evaluated and those with major benefits have 
been identified. Air cycle concepts consisting of motor driven compressors 
supplying compressed air to conventional boot strap units are shown to have 
good performance when full advantage is taken of high pressure water separa- 
tion, etc. Air cycle/vapor cycle hybrid concepts which use this more effi- 
cient cooling to meet peak hot day demands, but retain the overall reliabilty 
of the simple air cycle system were also evaluated. In these systems the air 
cycle system remains the primary mode of cooling, but vapor cycle is used to 
supplement the air cycle on hot humid days. Pure vapor cycle cooling is, of 
course, the most energy efficient cooling method and the evaporator acts also 
as a dehumidif ier . Reliability, cost, and maintenance are some of the 
criticisms of the more efficient vapor cycle cooliug system. 

Large motors (243 hp) are required for an air cycle system. Figure 103 
shows an alternative system proposed for the AEECs in the IDEA. It is a 100 
percent vapor cycle system in which Freon compressors provide cooling for all 
hot day ground conditions and ram air heat exchangers for normal flight con- 
ditions. As shown in the table 17, the maximum cooling 3 jad is reflected by a 
fully loaded cabin of 350 passengers, during hot humid day conditions with a 
humidity equivalent to 130 grians of moisture/lb of air. Under such condi- 
tions, three 24.6 ton cooling packs are required, of which 16.8 tons is sen- 
sible heat and 7.8 tons is latent heat. Each pack is designed to supply about 
200 ppm of 40°F air with a moisture content of 36 gr/lb. This provides a 
relative humidity of 38 percent in the cabin and it results in 100 lb of 
return air supply to the upstream side of the evaporators carrying some 
46 gr/lb on the hot humid day. The estimated power for each freon compressor 
is calculated at approximately 58 hp plus 11 hp for the cabin compressor. To 
this must be added 20 hp for the condenser fan, 10 hp for the Hx fan and 5 hp 
for the recirculation fan. The Freon cooling pack power will be about 104 hp 
which is near the pressurization hp/pack. However, since these loads are 
divergent (pressurization is not required on the ground, and Freon cooling is 
not required at cruise flight), a proprietary approach of using a single two 
speed common motor drive for the Freon compressor and the cabin compressor is 
identified. Both the Freon and cabin compressors modulate the IGVs to control 
the cooling and pressurization conditions. Note that the total load reflected 
to the APU or external power for hot humid day cooling of the IDEA would be 
about 95 kW/pack or 285 kW total. 

Whereas the cabin pressurization uses the two speed capability of the 
induction drive motor, the Freon compressor only uses the 50 percent speed 
condition. The point design for the vapor cycle system is therefore based on 
a nominal motor speed of 24,000 rpm. Motor speed changes are accomplished by 
changing the pole configurations on the motor as the power supply character- 
istics change (see below). 






208 

i 




- «? 




Figure 103: - IDEA ECS: electrical pressurization vapor cycle cooling. 




Condition and 
Power Source 

Power 

Characteristic 

Motor 

Poles 

Motor 

Speed (rpm) 

Ground External Power 

3-Ph 

200 V 400 

Hz 

2 

24,000 fnom.) 

APU Power 

3-Ph 

400 V 800 

Hz 

4 

24,000 inom.) 

Engine Ground Idle 

3-Ph 

200 V 400 

Hz 

2 

24,000 (nora.) 

Low Altitude Operation 

3-Ph 

400 V 800 

Hz 

4 

24,000 (nom.) 

Cruise Altitude Operation 

3-Ph 

400 V 800 

Hz 

2 

48,000 (nora.) 1 

1 Freon compressor off 
This tabulation shows that 

the Freon compressor 

speed is 

compatible with the 


different power sources and the speed is maintained at the nominal 24,000 rpra 
with external power, APU power and engine driven generator power. When the 
airplane reaches altitudes above which dynamic cooling is not required the 


Freon compressor drive is isolated by opening an electromechanical clutch. As 
the airplane climbs to operating altitude, a point is reached where a speed 
change to 48,000 rpm is initiated by the microprocessor control. At this 
time, the IGVs on the cabin compressor close and then gradually modulate to 
the full-open condition, as the airplane climbs to operating cruise altitude 
of 35,000 feet. 

As shown in figure 103, the motor drives the cabin compressor and the 
Freon compressor. An electromagnetic coupling Is used to isolate the latter, 
when not required. The displacement of the cabin compressor is about 
1.5 lb/sec (corrected) at altitudes up to 35,000 feet and slightly lower mass 
flow at altitudes up to 42,000 feet. Like the Baseline, the IDEA AEECS is 
designed to meet full air conditioning capability with two packs operating and 
an ability to maintain a 6,000 foot (pressure) cabin at altitudes up to 
25,000 feet, with only one pack operating. As explained, the vapor cycle 
(Freon compressor) was selected as the primary ground/low altitude cooling 
mode but, at higher altitudes, it can be switched off to preserve Its life and 
reduce the maintenance costs. In the ground cooling mode, the TSM operates at 
50 percent speed and the IGVs are modulated to the closed position, so that 
the air compressor develops only enough head to overcome system pressure 
losses. 

The heat exchanger, Hx, is used primarily to remove the heat of 
compression, while the evaporation provides additional cooling of the cabin 
inflow air. On the ground modulation of the air through the heat exchangers 
and condensers provides variable condenser cooling while an expansion valve 
(EV) modulates the Freon flow into the evaporator. Cabin pressure is 
modulated by the pressure regulating valve, and temperature control/mass flow 
control is via a pP based ECS control that furnishes the necessary logic 
commands to the TSM, IGVs, etc. Cabin recirculation of 50 percent is 
accomplished with three recirculation fans, (RCFs) that return cabin air 
through the filters to the front ends of the evaporators. 
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6.3 Advanced All-Electric Enviroim ^ntal Control System 


Earlier in this text, it was stated that an easy rule-of-thumb relation- 
ship for a shaft powered ECS vs a bleed powered ECS was approximately 
100 hp/pps. By regeneration, however, it is possible to consider a lower 
relationship by recirculating cabin outflow air through a cooling/power 
turbine mounted on the same motor shaft as the cabin compressor. In this 
manner the motor can be off-loaded by the amount of regenerated power. 

This reduces the ECS power requirement by about one-third, resulting in a 
cruise ECS load on the engines of 282 hp, or 94 hp/engine. This value is used 
in the buildup of total secondary power loads in assessing the impact on 
aircraft performance (Chapter 12). The system involves technology which is 
proprietary to Lockheed. 


8.4 Identification of Critical Technologies 

8.4.1 £1 1 electric ECS . - Theoretically the technology for the emergence of 
an AEECS if in place today, but it is presently without any substantive 
support in terms of hardware implementation and integrated systems test Lng. 
Furthermore, there is the potential for the development of energy efficient 
AEECS approaches that would draw upon novel and innovative approaches. High 
altitude pressurization of large aircraft and their cooling requirements on 
the ground constitute the main challenges for the successful development of an 
energy efficient AEECS. The aerospace ECS industry has outstanding capability 
and expertise but they cannot independently fund this new technology when 
there is no new aircraft on the horizon that might take advantage of this 
technology . 

The approaches for cooling In the AEECS could involve motor driven air 
cycle/bootstrap , vapor cycle, combination air cycle/vapor cycle (hybrid) and 
other combinations. Similarly the systems could be configured as primarily 
air cycle (cooling) for most normal days and supplementary vapor cycle for hot 
humid days. Fuel conservation will be the primary goal but the consideration 
of the power demand on the external power supplies is of concern as it was for 
engine starting. As highlighted in this report, the power capacity for 
cooling a fully loaded 350 passenger airplane on a hot humid day could be of 
the order of 282 hp. This again implies the continuous running of a high 
capacity APU to power the ECS on the ground with the attendant high fuel 
consumption and maintenance costs. 

8.4.2 ECS: plans and resources for technology readiness - Estimates of the 

schedule and costs are shown in figure 104. Typically the resources required 
include aerospace ECS and electrical machinery suppliers, together with the 
airframe manufacturer who is responsible for integrating the system into the 
aircraft . 


* * '***& ~. * 
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9. FLIGHT CONTROL SYSTEM 

The baseline flight control system, described in Chapter 2, represents a 
late 1970’s flight control system (FCS) design. Its features include a 
three-axis, primary mechanical control system; hydromechanical actuation 
systems; a digital automatic FCS with a CAT III automatic landing mode; and 
analog augmentation and active control systems. The digital flight control 
system (DFCS), which includes the autopilot, flight management system, and 
associated avionics can be characterized as a loosely couplea group of 
federated multiple processors. Digi.al serial broadcast buses (ARINC 429) are 
used extensively for inter processor communications as well as input and output 
to and from digital avionics. 

The integration of system functions such that common sensors, I/O buses, 
and processors are shared is held to a minimum. Dedicated sensors and servos 
are used for the flight-phase-critical functions. A high degree of separation 
is maintained between the Individual subsystems, with the subsystems 
partitioned according to redundancy requirements as follows: 

• primary flight control system (flight-critical, mechanical system) 

• basic autopilot functions and automatic landing (flight-phase-critical, 
dual-dual/ fail-operational digital system) 

• augmentation functions (fail-operational and fail-passive analog 
systems) 
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• flight management and outer-loop autopilot functions 
(nonf light-critical , dual/fall passive, digital system) 

While the baseline architecture offers vast Improvements over previous 
architectures, the Industry has only begun to tap the potential of digital 
flight control systems. This potential can only be tapped by utilizing 
critical-path enabling technologies and methodologies which will be discussed 
In later sections. Integrated flight control systems technology combined with 
DFCS assurance methodologies will enable certif lcable, fault-tolerant, 
integrated flight control system designs while VLS1/VHS1C will enable the 
design Implementations to meet the cost, weight, resource, and flight safety 
requirements. This baseline flight control system Is used to define functional 
requirements, equipment and equipment Interfaces, flight control surface 
configurations, and electromechanical actuation requirements for the IDEA 
aircraft . 

The IDEA flight controls study places primary emphasis on all flight- 
critical, flight phase-critical, and flight essential system functions. The 
flight management system and other associated avionics are provided with a 
separate data bus which reflects a general technology Improvement over the 
Baseline. Interconnections between this system and the flight control system 
is provided as needed. This separates the flight controls, propulsion con- 
trols, and power management systems from the nonflight-critlcal communication, 
navigation, flight management, performance management, cockpit management, 
displays and subsystem control systems. Additional architecture 
configurations as well as tradeoffs and analysis are considered for these 
nonflight-critical systems. 

The electromechanical actuation system (EMAS) configuration generation, 
trade-offs, and analysis are documented in Chapter 6. Only the actuation 
interface are considered as a part of the flight controls study. 

The major flight control system objective for the IDEA study is to select 
a certif lcable, full-time, flight-critical, digital flight control system 
which uses only electrical forms of power. This DFCS configuration is an 
integral part of a viable IDEA configuration. This selected configuration 
must demonstrate a superiority over other potential configurations with 
respect to selected criteria assuming potential enabling technology within the 
1990 time frame. Figure 105 diagrams the overall strategy for the IDEA FCS 
study . 

It is assumed that four Independent electrical power sources with no 
correlated faults will be provided. Each of these independent sources have a 
maximum failure rate of 1 failure In 100,000 hours. 
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PREFERRED IDEA DIGITAL FLIGHT CONTROL SYSTEM 


IMPLEMENTATION 

RELATED 

TECHNOLOGIES 


Figure 105. - IDEA flight control system study strategy. 


9.1 IDEA Flight Control System Requirements 

9.1.1 Design requirements . - A cer tif icable, flight-critical DFCS that uses 
only electrical forms of power must be an integral part of a viable IDEA 
configuration. This requirement dictates that a fly-by-wire or fly-by-light 
primary flight control system with an electromechanical actuation system 
interface will be a design specific requirement. In addition, this all- 
electric, fly-by-wire/light technology must be ready by 1990. 

9.1.2 Flight safety requirements . - Flight safety is the overriding concern 
for flight control system definition and validation. In order to have a 
certificable FCS the system configuration must comply with all applicable FAA 
regulations. In particular, FAA Advisory Circular (AC) 25.1309-1 defines 
maximum failure probabilities for flight-critical and flight-essential sys- 
tems as follows: 

• CRITICAL - Functions whose failures would contribute to or cause a 

failure condition which would prevent the continued safe 
flight and landing of the airplane must have a failure 
probability of less than or equal to 10 (extremely 
improbable) • 

• ESSENTIAL - Functions whose failure would contribute to or cause a 

failure condition wnich would significantly impact the 
safety of the airplane or the ability of the flight crew to 
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cope with adverse operating conditions m^st have a failure 
probability of less than or equal to 10 (improbable). 

The primary fly-by-wire FCS and full-time pitch augmentation are 
classified as flight-critical systems. Since the DFCS is dependent on the 
electric power system, this system is also classified as flight-critical. To 
achieve the above reliabilities for flight critical systems a minimum design 
guideline is that these systems have double fail-operational levels of redun- 
dancy. The minimum failure probability must be achieved for a reference 
flight of 10 hours. 

9.1.3 Func t ional requirements . - All flight control system functions imple- 
mented on the baseline aircraft and described in Section 2.5 will be a subset 
of the IDEA FCS functions. In addition to the baseline functions the fol- 
lowing functions will be added: 

• pitch augmentation for a relaxed static stability aircraft 

• roll augmentation 

• flutter supression and load limiting systems (Alternate IDEA) 

A full complement of quad sensor sets allow measurement of the aircraft's 
state variables in both the linear and rotational axis. Table 18 lists a 
representative set of functions and their safety classification. 

9.1.4 Memory and throughput requirements . - Computer and information transfer 
system resource requirements are determined by the memory requirements, 
computational throughput requirements, and sensor/effector 1/0 data require- 
ments for all functions required and they are also dependent on the individual 
architecture and topology of each candidate. Tables 19 and 20 list the 

sof tware/hardware functional requirements and the sensor/ effector data rate 
requirements respectively. Once the candidate architectures have been 
configured the resource requirements for each candidate can be computed. 


9.2 IDEA Flight Control System Functional Description 

The functional description of the IDEA FCS is almost identical to the 
baseline aircraft except for the following Important areas. 

• fly-by-wire/light primary flight controls and propulsion controls 

• pitch augmentation for a relaxed static stability aircraft 

• series autopilot and trim 

• additional nonessential augmentation and active controls 




214 





TABLE 18. - FCS FUNCTION CRITICALITY 


Axis 

Function 

Safety & 
Classif icat ion 

Flight 

Segment(s) 

Comment (s) 

Pitch 

System 

Manual Control 

Cr itical 

All 

Manual Control & 
Stability Augmentation 


Pitch SAS 

Critical 

All 



Autoland 

Critical 

Landing 

Below Cat. Ill Minimums 


Pitch Trim 

Essential 

All 



Stall Warning 

Essential 

All 



Autopilot 

Nonessential 

All 



Gust Alleviation 

Nonessential 

All 


Thrust 

Throttle Setting 
Autothrottle 

Critical 

Nonessential 

All 

Fly-by-Wire 

Plunge 

Direct Lift 

Cr it ical 

Landing 

Below Cat* 111 Minimums; 
Spoilers if 1-4 


Load Alleviation 

Nonessential 

All 

Automatically 
Deactivated via Pitch 
SAS Degredation; 
Outboard Ailerons 


Elastic Mode 
Suppresion 

i 

Nonessent ial 

All 


Yaw 

Manual Control 

Cr it ical 

All 



Autoland 

i 

Critical 

Landing 

Below Cat. Ill Minimums 


Yaw SAS 

i 

Essent ial 

All 



Rudder Trim 

Nonessential 

All 


Roll 

Manual Control 

! 

’ 

Critical 

All 

Spoilers #2-6 Full Flaps 
Non-Essential 


Autoland ! 

Critical 

Landing 

Below Cat. Ill Minimums 


Roll SAS | 

i 

Nonessent ial 

All 



Aileron Triir 

Nonessent ial 

All 


*FAA AC 

25.1309-1 
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TABLE 19. - SOFTWARE/HARDWARE REQUIREMENTS 


Requirement* 

Throughput 

Main Memory 

Mass Memory 

Loop 



(16 Bit) 

(16 Bit) 

Freq 

Function 

(kips) 



(Hz) 

Primary Flight 
Controls (FBW) 

350 

30K 

30K 

5 to 100 

Autopilot 

70 

15K 

15K 

10 to 25 

Thrust Management 

25 

10K 

10K 

10 

Flight Control, 
Display and Control 
(Optional) 

100 

4 OK 

40K 

10 

Total Flight Management 

505K 

215K 

1165K 


Radio Navigation 

15 

10K 

10K 

1 to 10 

Navigation 

15 

30K 

30K 

1 

Guidance 

100 1 

4 OK 

40K 

1 to 20 

Traffic Control 

100 j 

15K 

15K 

10 

Performance Management 

100 

10K 

10K 

ON DEMAND 

Operations Planning 

10 

10K 

50 OK 

ON DEMAND 

Flight Management, 
Display and Control 

150 

i 

100K 

200K 

5 

*Based on A1PS Requirements Study (Reference 15) 


Figure 106 shows a functional description of all the manual, augmentation, 
and active controls used with the IDEA aircraft. 

The first major difference in the two aircraft is the implementation of 
the primary flight controls function. They have converted from a mechanical 
linkage to an electrical or optical control. A side arm controller converts 
pilot inputs to electromagnetic impulses which are transmitted by wire or 
fiber optic cable to the flight computer using analog or digital coding. The 
computer combines this command with other input and transmits the surface 
position command by electromagnetic media to the EMAS using analog or digital 
coding. Fly-by-wire/light propulsion and engine control is another important 
issue that must be considered. Redundancy of the engine controllers is the 
responsibility of the engine manufacturer and is not a primary concern of 
flight controls as long as the engine reliability is not affected by the 
Integrated, fly-by-wire/light, propuls ion/ flight control system. Inner loop 
engine control is a function dedicated to the engine controller. The 
autothrottle function will be Implemented as in the baseline aircraft with a 
separate servo on the throttle quadrant. There will be quad thrust command 
and status signals available to the engine controllers from the flight control 
system. 
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TABLE 20. - SENSOR/EFFECTOR DATA RATE REQUIREMENTS 




Requirement 

Data Rate 
(words/ sec) 

Sensor/Effector 

16 Bit Word 

Pitch Side Arm Position Sensor 

50 

Roll Side Arm Position Sensor 

50 

Pedal Position Sensor 

50 

Roll, Pitch, Yaw Trim Switches 

5 

A/P and Speed Brake Switches 

1 

Engine II 1, 2 and 3 Throttle Quadrauts 

5 

Engine 111, 2 and 3 Fuel Cutoff Switches 

1 

Electronics Flight Instruments 

525 

Angle of Attack Sensor 

20 

Landing Gear Levers 

1 

Landing Gear Actuators 

1 

Side-Slip Sensors 

20 

Flap/Slats Lever 

20 

Radio Altimeter 

50 

Instrument Landing System 

50 

VOR 

20 

Digital Air Data System 

50 

Flight Management System 

40 

Outboard Aileron EMAS 

170 

Inboard Aileron EMAS 

90 

Spoiler EMAS 

90 

Oleo Strut Compression Switch 

5 

Wheel Spin Up Tach 

5 

Wing Tip Accelerometers 

100 

Flaps and Slats PDUs 

30 

Rate Gyros (roll, pitch, yaw) 

20 

Accelerometers (long. lat. vert.) 

20 

Inertia Reference System 

620 

Horizontal Stabilizer EMAS 

90 

Rudder EMAS 

90 


The second Important issue is the relaxed static stability (RSS) 
augmentation. Operating the aircraft with a negative longitudinal 6tatic 
margin reduces trim drag and permits a smaller horizontal tail to be used, 
resulting in additional savings in weight and drag. Angle-of-attack sensors i 

have been added to augment the pi'ch axis stability by commanding a positive * 

deflection of the stabilizer for increasing (positive, pitch up) angle of 
attack. This function was designed as a flight-critical function since an 
extreme negative static margin could affect the ability of the pilot to 
control and land the aircraft if this function were lost. 

Another important issue is that regarding parallel trim, parallel auto- 
pilots, and variable feel systems for roll, pitch, and yaw control systems. 

The baseline aircraft had these systems Integrated into the mechanical flight 
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Figure 106. - IDEA FCS functional diagram* 
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control system. The IDEA FCS will use a side arm controller and rudder pedals 
for primary control of the horizontal stabilizer, ailerons, rudder, and 
spoilers. Controller position will command the respective surface position. 
All primary, augmentation, autopilot, and trim commands will be blended within 
the computer software and transmitted to the EMAS as one signal. This would 
produce only series trim and autopilot inputs without any way for the pilot to 
override mechanically the system as in the baseline aircraft. While a 
parallel trim input is not required, there may be a requirement for a variable 
feel system and parallel autopilot input to the side arm controller. FAR 
25.1329 provides flight safety guideliner for automatic pilots. Pilot 
evaluation with a side stick controlled, fly-by-wire system on the Airbus 
Industrie A-320 should clarify flight safety and pilot preference in this 
area. Until the issue is resolved, the parallel trim Input, variable feel 
input, and parallel autopilot input will remain in the system as an optional 
implementation. This will not affect the FCS system trades. 


9.3 IDEA-based Subsystems Alternatives 

Certain technologies currently under development offer performance and 
cost benefits which are far superior to present technologies. They also limply 
greater risks in achieving these desired goals by the year 1990. These 
payoffs are great enough to justify incorporating these technologies as a 
integral part of all the candidate architectures. Since they allow the design 
of components which would otherwise be Impractical with present technology. 
Because of the risks, they become the critical-path in the DFCS development. 
The identification of critical technologies will be covered in Section ^.6. 
Table 21 gives a summary of the technologies which are an integral part of the 
IDEA candidate architectures. 

9.3.1 Flight control system equipment and interfaces . - An implied require- 
ment of all DFCS candidate arv hltectures is that they have equipment for and 
interfaces to all sensors, effectors, and avionics which -.re requir d by the 
IDEA aircraft. The equipment and interfaces for ail the DFCS architectures 
will remain the same except for the computers and bus hardware which will vary 
from candidate to candidate. Table 22 lists a comprehensive set of commercial 
transport FCS equipment used for IDEA. Whenever possible, the equipment will 
be compatible with equipment used on the baseline aircraft which is an L-1011 
derivative. This will provide an accurate data base for component cost, 
weight, and reliability and will not affect candidate architecture trade-offs 
s^nce the selection will be made on a relative basis. 

The sensor ana effector interfaces can be either analog or digital 
depending on the equipment and the architecture. The interface refers to the 
link between sen^oi/ef fee tor and the I/O bus terminal devices, which are 
described in Section 9. 3. 3. 2 and figures 113, 114 and 119. Figures 107 (a) 
and (b) show a typical analog interface. Figure 107 (c) and (d) show typical 
discrete interfaces* Figure 107 (e) shows the interface for a stand-alone RTU 
or Mesh network node where the interface is a serial digital broadcast bus and 
(f) shows an embedded RTU or node where a parallel digital interface is used. 
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TABLE 21. - INTEGRAL ENABLING TECHNOLOGIES 


' — Aspect 
Technology 

i 

Risk 

Significance 

VHS1C/VLS1 

Low to Medium 

i 

Low cost } low weight, high speed 
component s 

High Temperature 
Electronics 

High ; 

Necessary for production of smart 
actuators, remote terminals, etc. 

Smart Servo 
Electronics 

Low to Medium 

Extend fault detect ion and 
isolation capability 

Side Arm Controllers 

i 

Low 

Pilot workload reduction increase 
cockpit instrument visibility 

Programming Languages 
(Ada) 

Low 

Embedded software design and 
implementation 

Dissimilar Redundancy 
(Processors) 

Low 

Assurance against generic software 
errors 

Electronic Flight 
Instrumentat Ion 

Low 

Enhanced ADI and HS1 displays 
Reduction in pilot workload 

Faul t-Tolerant 
Processors 

Low 

DFCS Processors subsystem 
reliability 

Faul t-Tolerant 
Power Distribution 
and Control 

Medium 

A prerequisite for all-electric 
fly-by -wire/ light technology 

Safety Assurance 

High 

FAA Cert if icability 

Integral Maintenance 

Medium 

Adequate preflight test coverage 
essential to reliability analysis 
assumptions 




9.3.2 Candidate architecture generation strategy . - Figure 108 diagrams the 
strategy to create an exhausive set of candidate architectures which cover the 
entire spectrum of possibilities* The enabling technologies and the archi- 
tectural classes and options are combined Iteratively to create as many 
realizable candidates as possible. Since the design/ implementation options 
are so extensive their application will be addressed in the context of a set 
of comprehensive fault-tolerant strategies using a system level approach. A 
set of fault-tolerant, systems level strategies, subsystems level strategies, 
and I/O bus types are used. 
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TABLE ?2. - IDEA DFCS EOUIPMENT 


Type 

Redundancy 

Location 

Flight 

Interface Criticality 

Computers 

(Specified by Particular Architecture) 


Bus 

Hardware 

(Specified by Particular Architecture) 


Side Arm 
Controller 
Quad Position 
Sensors Per Unit 

2 

CP 

Analog 

CR 

Pedal Assembly 
Quad Position 
Sensors Per Unit 


CP 

Analog 

CR 

Flaps/ Slats 
Font roller 

1 

CP 

Analog/Discrete 

ESS 

Throttle 

Assembly 

l 

CP 

nigital/Analog 

CR 

Trim Switches 

b 

CP 

Discrete 

NCR 

Speedbrake 

Switch 

6 

CP 

Discrete 

NCR 

A/P Disconnect 
Switch 

? 

CP 

Discrete 

NCR 

0 / A Mode Switch 

2 

CP 

Discrete 

NCR 

A/T Disconnect 
Switch 

1 

CP 

Discrete 

NCR 

Individual 
Throttle A/T 
Disconnect Switches 


CP 

Discrete 

NCR 

Engine Fuel 
Shutoff Switches 

2 

CP 

Discrete 

CR 

Landing Hear 
Controller Unit 

l 

CP 

Discrete 

CR 


CP * cockpit 
CR * critical 


essential 

non-critical 


m 





TABLE 22. - IDEA DFCS EQUIPMENT - Continued 


Flight 


Type 

Redundancy 

Location 

Interface 

Criticality 

Roll/Pitch/Yaw 
Feel System 


Optional 

NCR 

Roll/Pitch/Yaw 
Parallel Trim System 


Optional 

NCR 

Roll/Pitch/Yaw 
Parallel Bid 


Optional 

NCR 

Inertial Reference 
Unit 

1 

MAB 

Digital 


Instrument Landing 
System (ILS) 

O 

L- 

FAB 

Digital 

FPC 

VOR 

1 

FAB 

Digital 


DME 

2 

FAB 

Digital 


Radio Altimeter (RA) 

? 

FAB 

Digital 

FPC 

Digital Air Data 
Computer 

2 

FAB 

Digital 


Compass 

2 

CP 

Digital 


Electronic Flight 
Instruments (EFI) 

2 

CP 

Digital 


FMCS CDTJ 

? 

CP 

Digital 


fccs cnu 

(Clareshield 

Controller) 

1 

CP 

Digital 

FPC 

FACS cun 

2 

CP 

Digital 


Maintenance/ Test 
Panel 

l 

CP 

Digital 


INS/OMF.OA 

1 

FAB 

Digital 


Digital Frequency 
Selector 

2 

CP 

Digital 



FAB = forward avionics bay FPC * flight-phase critical 

MAB = mid avionics hay 
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TABLR 

??. - IPKA DFCS ROUIPMBNT - Continued 



Type 

Redundancy 

Location I nt erf ace 

Flight 
C rlticality 

irs cnu 


9 

CP 

Oigital 



Ch ronometer 


1 

CP 

Oigital 



4CARS nata Link 


1 

CP 

Oigital 



FSDtJ /Data Link 


1 

CP 

Oigital 



FWC display 


2 

CP 

Oigital 



Thrust Hating Panel 

1 

CP 

Oigital 



Horizontal Stabilizer 
Position RVOT 

4 

KMP 

Analog 


CR 

Left Inboard 
Aileron RVOT 


4 

LW 

Analog 


CR 

Right Tnhoard 
Aileron RVOT 


4 

RW 

Analog 


CR 

Left Outboard 
Aileron RVOT 


4 

LW 

Analog 


CR 

Right Outboard 

Aileron RVOT 


4 

RW 

Analog 


CR 

Rudder RVOT 


4 

PMP 

Analog 


CR 

Left Wing 
Sooilers #1 - #6 
RVOT 

V* 

(4/Spoile r) 

LW 

Analog 


FPC 

Right Wing 
Spoilers #1 - ^6 
RVOT 

?4 

(4/Spoiler) 

RW 

Analog 


FPC 

Pitch Rate Gyros 


4 

MAR 

Analog 


CR 

Roll Rate Gyros 


4 

MAR 

Analog 


CR 

Yaw Rate Gyros 


4 

MAR 

Analog 


CR 


PM? 

RW 

3 empennage 
3 right wing 

LW 3 
RVOT 

Left Wing 
= rotary variable 

displacement 



transformer 


??R 









TAftLF. 22. - TDK A DFCS EQUIPMENT - Continued 


Flight 


Type Redundancy 

Location 

Interface 1 

Criticality 

Longitudinal 

Accelerometers 

4 

MAR 

Analog 

CR 

Lateral 

Accelerometers 

4 

MAR 

Analog 

CR 

Normal Accelerometers 

4 

MAR 

Analog 

CR 

Left Wing Tip 
Accelerometers 

2 

LW 

Analog 


Right Wing Tip 
Accelerometers 

2 

RW 

Analog 


Dual Angle of 
Attack Sensors 

4 

C? 

Analog 

CR 

Dual Side-Slip 
Sensors 

4 

CP 

Analog 

CR 

Control Stick Steering 
Force Sensors 

7 

Optional 



Control Wheel Steering 
Force Sensors 

7 




Avionics Controls 
Power Supplies 

4 

Optional 


CR 

Oleo c trut 
Compression Switch 

2 

LW, RW 

Discrete 


Wheel Spin-Dp 
Tack Discrete 

2 

LW, RW 

Discrete 


Rudder Ratio 
Actuation System 

2 

EMP 

Analog/Digital 

CR 

Horizontal Stabilizer 
EMAS 

4 

EMP 

Analog/Digital 

CR 

Rudder EMAS 

2 

EMP 

Analog 

CR 

Left Inboard 

1 

LW 

Analog 

CR 


Aileron EMAS 
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Type 

Redundancy 

Right Inboard 
Aileron EMAS 


1 

Left Outboard 
Aileron EMAS 


2 

Right Outboard 
Aileron EMAS 


2 

Left Wing Spoiler 
#1 - A6 EMAS 

6 

(l /Spoiler) 

Right Wing Spoiler 
#1 - 0f> EMAS 

h 

(1 //Spoiler) 

Flaps PT)U Motors 


2 

Slats PDU Motors 


2 

Engine Controller 
Interface Eng. #1 


4 

Engine Controller 
Interface Eng. 02 


4 

Engine Controller 
Interface Eng. #3 


4 

MOSE Landing Cear 
EMAS 



Left Main 
Gear EMAS 



Right Main 
Gear EMAS 



Nose Wheel 
Steering 




N = Wose 


Flight 


Location 

Interface 

Criticality 

RW 

Analog 

CR 

LW 

Analog 

CR 

RW 

Analog 

CR 

LW 

Analog 

FPC 

RW 

Analog 

FPC 

MAR 

Analog 

ESS 

MAB 

Analog 

ESS 

LW 

Analog 

CR 

EMP 

Analog 

CR 

EMP 

Analog 

CR 

V 

Analog 


LW 

Analog 


RW 

Analog 


W 

Analog 
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D EDICAT ED ANALOG SIGNAL TO EM AS 



RECEIVING CIRCUIT USES OHMIC LOAD TO ALLOW +250 MA OF 
CURRENT TO FLOW. CURRENT SENSING CAN THEN BE USED 
AT THE TRANSMITTING END TO DETECT FAILURES . THIS FAULT 
DETECTION METHOD IS COMPATIBLE WITH PRESENT EH VALVE 
TECHNOLOGY 


DEDICATED ANALOG SIGNALS FROM SENSORS 


! r 

SENSOR 


ZXX30000CZ 

TWISTED PAIR OR TWIN CABLE WIRE 


28 VAC 
400 Hz 
EXCITATION 
(OPTIONAL) 


(M 


xxxx> ocx^rs 

~ [ TWISTED SHIELDED PAIR U * 
— " TWISTED PAIR (TP) 

TWIN CABLE 


DEMODULATOR OR 
RECEIVER AMPLIFIER 


SENSOR SIGNAL 
TO A/D CONVERTER 
IN COMPUTER 


Figure 107a and b. 


Sensor/effector interfaces. 
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Figure 107c, d and e. - Sen6or/eff ector interfaces. 
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SELECTED ARCHITECTURES 
FOR EVALUATION 


Figure 108. - Candidate architecture generation strategy. 


• Systems Level Strategies 

- disjoint architecture 

The system has multiple processors where each is dedicated 
to a particular function and control is through independent 
operating systems. The processors are completely 
decoupled. 

- federated architecture 

The system has multiple processors where each resource is 
dedicated to a particular function and control is through 
independent operating systems. The processors are loosely 
coupled. 

- centralized architecture 

The functions are dedicated to a tightly coupled processor 
group (single resource) and control is through a central 
operating system. 

- distributed architecture 

The system has multiple processors where each resource is 
freely assignable to functions, and control is through 
multiple, cooperating, autonomous operating systems. 
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• Subsystem Level Strategies 

- parallel redundancy (triplex, quadruplex) 

- multiprocessor (FTMP, SIFT) 
dual-monitored pairs (Honeywell’s 3CMP) 

• 1/0 Bus Strategies 

- dedicated analog wire link 

- direct (dedicated serial link, AR1NC 429 D1TS) 

- MUX (linear multiplexed data bus such as M1L-STD-1553) 

- switched network multiplexed bus (switched network bus 
architecture such as the CSDL Damage/ Fault-Tolerant 1/0 
Network) 

point-to-point networks (packet switched) star, ring, 
irregular, fully connected 

These candidates must satisfy IDEA requirements and be compatible with the 
IDEA interface. Commonality among technologies and sensor/effector implemen- 
tation will be maintained for all the candidates except where the particular 
architecture is dependent on a particular technology. Sensors, effectors, and 
avionics are common with the baseline and the data communications media will 
be electrical (single wire, twisted pair, twisted shielded pair). This will 
prevent system implementations which could be applied equally to all the 
architectures, from entering into the trade-offs. 

The Implementation related technoioy trade-offs which can be evaluated and 
applied to the preferred IDEA candidate once the final selection has been 
made are as fellows: 

• fiber optics vs., wire 

• skewed sensors or analytical redundancy 

• advanced 9ensors 

• software fault-tolerances vs. dissimilar redundant processors for 
assurance against generic software failures 

The set of candidate architectures generated for preliminary evaluation 
are shown in table 23. A subset of these architectures were selected for 
final evaluation based on uniqueness, maturity, and level of coverage for a 
particular grouping. The candidates in table 23 which have an asterisk in the 
upper right hand corner of the first column are the selected candidate 
architectures. The architectures not selected were rejected because the 
features which made them unique from the others in its group did not give them 
significant enough advantages over the others. 

9.3.3 Selected candidate architecture descriptions . - Architectures 2B, 2E, 
3B, and 4A were selected for final evaulation as a representative set of 
potential preferred IDEA architectures. Candidate architecture 1 is not being 
considered as a viable candidate for IDEA because it does not represent a 
significant technology advancement involving high risks and high payoffs. It 



TABLE 23 


IDEA CANDIDATE ARCHITECTURES 


* 




Candidate 


DFCS Systems 

Computer Subsystems 

1/0 Bus 


Architecture 


Architecture 

Architecture 

Architecture 

Comments 

AR1NC 700 Series 

* 

Federated 

Quad, Dual-Dual 

AR1NC 429 Dlts 

Reference 

Fly-By-Wire 

1 


Dual, Simplex 

Dedicated Analog 

System 

Centralized/ 


Centralized 

Quad 

Dedicated 


Dedicated 

2A 



Analog 


Centralized/ 

* 

Centralized 

Quad 

Dedicated 

128 Remote 

Direct 

2B 



Serial 

Terminals 

Centralized/ 


Centralized 

Quad 

Quad Linear 

32 Remote 

Mux I 

2C 



Multiplexed Bus 

Terminals 

Centralized/ 


Centralized 

Quad 

Quad Linear 

128 Remote 

Mux 11 

2D 



Multiplexed Bus 

Terminals 

Centralized/ 


Centralized 

Quad 

Dual Quad Linear 

128 Remote 

Mux III 

2E 



Multiplexed Bus 

Terminals 

Centralized/ 


Centralized 

Quad 

Mesh 

32 Nodes 

Mesh 1 

3A 



Ne two rk 

8 BC 

Centralized/ 

* 

Centralized 

Quad 

Mesh 

32 Nodes 

Mesh 11 

3B 



Network 

16 BC 

Centralized/ 


Centralized 

Quad 

Mesh 

32 Nodes 

Me sh Ring 

3C 



Network 

16 BC 

Partially 

* 

Distributed 

5 Quad Computers 

Quad Linear 

Central lzed 

Distr ibuted/Mux 

4A 



Multiplexed Bus 

Bus Control 

Fully 


Centralized 

Triplex and Dual 

Dual Linear 

Honeywell 

Distr ibuted/Mux 

4B 


SCMPs 

Multiplexed Bus 


Distributed 

4C 

Distributed 

Simplex, Dual, Quad 

Mesh 

Charles Stark 

A1PS Based 



Kul tiprocessors 

Network 

Draper Labs 


♦Selected for Final Evauation (1, 2B, 2E, 3B, 4A) 


la being evaluated to provide a suitable reference for comparison with the 
advanced architectures* 

9.3.3. 1 Candidate architecture l f AR1NC 700 fiy-by-wire reference system: 

The AR1NC Characteristics 700-799 define a 1980-1985 DFCS design specification 
for a commercial transport similar to the baseline aircraft. These charac- 
teristics specify types of functional modes, type and number of computer line 
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replaceable units (LRU) and their desired function, the external dimensions 
and the interface of the computer subsystems and avionics* The general DFCS 
and flight management system (FMS) architecture is specified. 

AR1NC 429 D1TS buses are used extensively for communications between radio 
navigation avionics, inertial navigation system units, displays, control and 
display units, and computer subsystems. Analog wire signals and dedicated 
discretes are minimized except where required for flight safety purposes. 

The DFCS and FMS can be characterized as a federated, multiple processor 
system made up by the following loosely coupled subsystems: 

• Flight Control Computer System (FCCS) - This system contains the basic 
autopilot and CAT 111 automatic landing functions; it can be dual-dual 
or triplex (fall-op). 

s Flight Augmentation Computer System - This .system contains the flight 
augmentation functions and trim functions; its design specif lcaton is 
undefined and is left up to the aircraft designer. Interfaces with 
other systems are defined. 

• Flight Management Computer System (FMCS) - This system contains the 
typical flight management functions plus nonessential autopilot 
functions; It can be a dual or simplex unit. 

• Radio Navigation Systems - 1LS, VOR, DME 

• Inertial Reference System 

The transition from present technology to fly-by wire technology can be 
accomplished with minimum risk by converting an AR1NC 700 series DFCS to fly- 
b^-wlre technology using proven analog signals to the sensors and effectors 
and removing the mechanical flight control system. The column and wheel are 
replaced with dual side arm controllers, each with quad position sensors 
for primary pitch and roll control. A similar arrangement is Implemented for 
the dual rudder pedals for yaw control. The interface to the electromechan- 
ical actuators is by analog signals and twisted, shielded pair wire. The 
flight augmentation computer system (FACS) is configured to provide fall-time, 
fly-by-wire, flight-critical, primary flight controls and augmentation 
functions. A description of the computer architecture, 1/0 bus architecture, 
and system Interconnections to sensors and effectors is shown in figures 109 
and 110. 

Due to the full-time, flight-critical requirement for primary flight 
controls the flight augmentation computer system (FACS) is a double fail- 
operational quadruplex unit. Signal selections are accomplished by voting 
signals in each computers. Fault detection, Isolation, and reconfiguration 
(FD1R) of sensors are Implemented in software. Fault detection of processors 
is in software with the isolation and reconf iguraticn implemented in hardware. 
The servo amplifiers are connected in Buch a way that they are Independent of 
the individual processors and are driven by a voted output from the four 
processors. The processors are protected by wrap-arounds, self-test, and 
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Figure 109. - Candidate architecture 1, AR1NC 429 tly-by-viire 
reference system. 
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Figure 110. - Details of candidate architecture 1. 
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watch-dog timers. Quad analog backup computers are used to protect against a 
generic software failure as well as a combination of three processor failures. 
Interprocessor communication is by 500K bits per second broadcast buses. This 
allows loose frame synchronization between processors. Signal lines from the 
sensors to the processors are not cross strapped, but the sensor cross channel 
is independent from the processor. The commands and discretes to the EMAS are 
cross strapped. 

9. 3. 3,2 Candidate architecture 2B, centralized/ direct: This architecture has 

a centralized fault tolerant computer system which uses direct dedicated, 
serial, broadcast buses for all sensor/effector communications information 
transfer s>stem (ITS). The buses are bidirectional, full duplex broadcast 
buses which can be either a wire or fiber optl^ implementation. A bus link 
similar to this would be constructed from two AR1NC 429 D1TS buses, one 
transmitting from the source device and one transraitt ing from the destination 
device . 

The fault tolerant computer system has responsibility for the following 
functions: 

• Bus redundancy management 

Bus control 

- DECS redundancy management 

• ^FCS maintenance/ test 

e Augmentation functions 

• Trim functions 

• Autopilot functions 

• Primary and secondary manual controls (fly-bv-wire) 

• Propulsion controls (fly-by-wire) 

Propulsion, flight controls, and bus control have been Integrated into one 
fault tolerant computer (FTC) of unspecified design. The FTC would most 
likely be a processor design similar to the Charles Stark Draper Labs (CSDL) 
Fault Tolerant Processor (FTP) which has double fail-operational capability 
(references 19 and 21). Figures 111 and 112 show diagrams of this systems 
architecture and bus topology which us^s a centralized FTC coupled to 128 
reu» „e terminal unit and transraitter/receiver unit pairs. A diagram of the 
RTU and T/R units are shown in figure 113. Due to the full-time, flight- 
critical requirement for primary flight controls the FTC is a double 
fail-operational, quadruplex unit. Signal selection is accomplished by voting 
signals in each computers. Fault detection, isolation, and reconfiguration 
(FD1R) of senrrs are implemented in software. Fault detection o* processors 
Is in software with the isolation and reconfiguration implemented in hardware. 
The processor is protected by wrap-arounds, self- test, and watch dog timers. 

A single digital dissimilar backup computer is used to protect against a 
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Figure 112. - Details of candidate architecture 2B 
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TRANSMtrWRECEIVER UNITS AND REMOTE TERMINAL UNITS 
FOR DEDICATED SERIAL BUSES 




- FULL DUPLEX, BI-DIRECTIONAL (TWIN CABLES) 

- BROADCAST 



Figure 113. - Transmitter/receiver units and remote terminal units. 


generic software failures as well as a combination of three processor 
failures. Interprocessor communication is by 500K bits per second broadcast 
buses. This allows loose frame synchronization between processors. 

A signal transmitter/receiver unit sends and receives serial multiplexed 
data to one remote terminal which multiplexes/ demultiplexes between one or 
more sensors or effectors. The basic level of redundancy is to have four T/Rs 
connecting directly with four RTUs which then each service one flight-critical 
sensor/effector group. The interface from the RTUs to the EMAS is cross 
strapped serial , full duplex broadcast buses. For the sensors the interface 
is predominately noncross strapped analog wires. 

The purpose of the RTUs is to eliminate the long cross strapped wire runs 
that would be required if direct serial connections to each EMAS had been used 
without device multiplexing. Because of the large numbers of remote terminals 
used, it is likely that cost and weight restrictions would prevent the remote 
terminal units from being independent line replaceable units except where the 
location and interface require it. More than 90 RT units are embedded within 
existing LRUs (computers, EMAS controllers, avionics, etc.) and share a common 
powe- supply with the LRU in which embedded. 
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The T/R units are independent from the FTCs and act upon a voted set of 

control signals and data from the four FTCs, Thus there can be no correlated 

faults between FTCs and T/R units. 

There are 128 remote terminals located throughout the aircraft. They are 
assigned to the following areas: 

1. Flight Station: 28 

2. Forward Avionics Bay: 32 

FTC and Bus Controlle ( EC) 0, 1, 2, 3 

3. Hid Avionics E ey: 16 

4. Right Wing: 20 

5. Left Wing: 20 

6. Empennage: 12 

9.3. 3.3 Candidate architecture 2E centralized/MUX 111: This architecture has 

a centralized fault tolerant computer system which uses a quad, linear, multi- 
plexed data buses for all sensor/effector communications. The buses are simi- 
lar in structure and operation to a M1L-STD-1553 bus. A command response 
protocol and centralized bus control are used with redundant bus controllers 
(BC) and remote terminal units (RTU) . A diagram of the RTU and BC units are 
shown in figure 114. Certain limitations have been relaxed with respect to 
bus length, stub length, and bandwidth to allow for increased capabilities due 
to far-term technology. 

Two independent sets of quad buses are used for 1/0 to sensors and 
effectors. One quad set runs longitudinally from the flight station to the 
empennage while the other runs laterally from wing tip to wing tip. Four BCs 
are used to connect each bus to the central FTC. The purpose of the two quad 
bus sets is to reduce the required bus stub length and total bus length which 
would be required if only one set had been used. Figures 115 and 116 show 
diagrams of the systems architecture and bus topology. 

The fault tolerant computer system and fault tolerant computer (FTC) are 
the same as those used with candidate architecture 2B (Section 9. 3. 3. 2). The 
BCs also have the same degree of isolatoni from the FTCs as do the T/Rs in 
candidate 2B. 

A single bus controller has centralized control over one multiplexed data 
bus. The coramand/response protocol is used to accomplish device multiplexing 
on each individual bus. The longitudinal buses have 22 RTUs per bus and the 
lateral bus has 8 RTUs per bus. The basic level of redundancy is to have four 
RTUs on separate MUX buses which then service one flight-critical sensor/ 
effector group. The interface from the RTUs to the EMAS is cross strapped 
serial, full duplex broadcast buses. For the sensors the interface is pre- 
dominately noncross strapped analog signals and twisted, shielded pair wire. 
Because of the large numbers of remote terminals used, it is likely that cost 
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BUS CONTROLLER AND REMOTE TERMINAL UNITS 


- HALF DUPLEX, BI-DIRECTIONAL LINEAR MUX BUS 

- FULL DUPLEX, BI-DIRECTIONAL MESH NETWORK LIN* C 

- COMMAND/RESPONSE PROTOCOL 



Figure 114. - Bus controller/remote terminal unit. 
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Figure 116. - Details of candidate architecture 2E. 


and weight restrictions will prevent the remote terminal units from being 
independent line replaceable units except where the location and interface 
require it. More than 90 RT units are embedded within existing LRUs 
(computers, EMAS controllers, avionics, etc.) and share a common power supply. 

There are 128 remote terminals located throughout the aircraft. They are 
assigned to the following areas. 

1. Flight Station: 28 

2. Forward Avionics Bay: 32 

FTC and Bus Contoller (BC) 0, 1, 2, 3, 4, 5, 6, 7 


3. 

Mid Avionics 

Bay 

4. 

Right Wing: 

20 

5. 

Left Wing: 

20 

6. 

Empennage: 

12 
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9. 3. 3.4 Candidate architecture 3B centralized/Mesh 11: This architecture 

uses a centralized fault tolerant computer system combined with a damage/ 
faul t~tolerant 1/0 mesh network using a switched network bus concept which 
allows path switching as well as device switching; this design was developed 
by the Draper Labs (Ref. 16, 17). Figures 117 and 118 show the system 
architecture and the bus topology. Figure 119 shows a subsystems level 
diagram of a mesh network node. 

The network is controlled centrally by the FTC through the sixteen bus 
controllers which grow and reconfigure the network and control information 
transfers. 

The nodes have three link connections and the links connecting the nodes 
are bidirectional, full duplex serial buses. These active nodes contain the 
transmitter and receiver units for the three links, a node controller, and a 
remote terminal which interfaces with the sensors and effectors. The node 
controller can configure the signal paths between the links within each node 
under control of the BC and FTC. Communication paths can be grown between 
nodes from each bus controller but none of the paths are allowed to connect. 
Inactive links remain to separate the active paths. Once a failure occurs, 
the bus can be reconfigured by deactivating active links and activating 
inactive links. 

The fault tolerant computer system and FTC are the same as those for 
architectures 2B and 2E (Section 9. 3. 3. 2). The same type of isolation is 
provided between the FTCs and BCs . 

The bus consists of two independent strata of sixteen interconnected nodes 
controlled by 16 BCs and connected to one FTC. The FTC initially commands the 
BCs to switch a path from node to node using a command/ response protocol. 

Once the path is switched it acts as a linear multiplexed data bus for the 
node RTUs on that path. Figure 118 shows a bus configuration with zero 
failures initially. It appears as eight linear multiplexed buses connected by 
inactive links. In the event of a failure the bus controller, which is 
continually prompting each node on its path for validity, will reconfigure the 
network to alleviate the fault. Either one of the two independent stratums 
can control the aircraft. This will allow assurance against the total 
collapse of one stratum. This event has to be considered highly improbable 
but not an impossible event since many of the nodes are interconnected and an 
unforeseen event could cause a fault to propagate through the entire stratum. 
The node redundancy design strategy is to provide a minimum of four nodes for 
each flight-critical sensor/effector set. In the case of the pitch control 
sensor/effectors, there are eight nodes. The same type of interface used for 
candidate architectures 2B and 2E from the RTUs to the sensor and effectors is 
used. 

There are two types of nodes used in this architecture: independent LRU 

nodes and embedded nodes. Independent LRU nodes are stand-alone LRUs which 
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Figure 117* - Details of candidate architecture 3B. 


contain a self-contained power supply, processor, and memory. The processor 

" is used for node link control, 1/0 control, and self-test, etc. 

The embedded node is embedded within another LRU. It utilizes the exist- 
ing LRU processor, memory, and power supply. In general, embedded nodes will 
be contained within EMAS. The flight station, mid, and forward avionics bay 
nodes are LRU nodes. The wings and empennage are embedded nodes. 

The 32 nodes are located throughout the aircraft. They are assigned to 
the following areas. 

1. Flight Station: Nodes = 0, 1, 2, 3, 16, 17, 18, 19 

2. Forward Avionics Bay: Nodes * 4, 15, 20, 32 

FTC and Bus Controller ( BC) 

0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15 

3. Mid Avionics Bay: Nodes * 7, 12, 23, 28 

4. Right Wing: Nodes - 5, 6, 21, 22 

5. Left Wing: Nodes » 13, 14, 29, 30 

6. Empennage: Nodes * 8, 9, 10, 11, 24, 25 26, 27 

9. 3.3. 5 Candidate architecture 4A, partially dist r ibuted/MUX: Candidate 

architecture 4A is a partially distributed system which uses a combination of 
general purpose flight computers and "dumb" R~Us distributed throughout the 
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Figure 118. - Details of candidate architecture 3b. 
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aircraft. These dispersed processors and RTUs communicate through a quad, 
14 near, multiplex bus which uses a command/ response protocol similar to a 
M1L-STD-1553B bus. Figure 120 and 121 shows the system architecture and the 
bus topology for this candidate. 

The "distributed" designation relates to the dispersed processing elements 
and to the distributed, reassignable functional processing. The fact that the 
system is only partially distributed is because a centralized bus controller 
is used instead of a fully distributed global bus control. Centralizing the 
bus control reduces the risks associated with the reconfiguration strategies 
proposed for fully-distributed systems. The disadvantages of a centralized 
bus controller, which relate to reliability, can be reduced by using an 
ultrareliable computer such as the Fault-Tolerance Multiprocessor (FTMP) or 
Software Implemented Fault Tolerance (SIFT). This option would result in 
wasted processing power and excessive hardware costs unless nonredundant pro- 
cessing, such as flight management, could be performed by this computer. 

A second reliable bus controller option would be to use a primary bus 
controller with two standby backup units. The standby units will be general 
purpose flight computers (GPFC or FC) which normally perform flight control 
functions. Bus control is passed to the standby bus controller spares through 
a dedicated interprocessor bus which connects the three processor units. It 
will have serial broadcast buses and discretes which will be used to transfer 
bus control and redundancy management data in the event of a failure of the 
primary bus controller. 

Much of the hardware component design has been borrowed from previous 
architectures. The central primary bus controller is a fault tolerant 
computer (FTC) having quad, parallel processors and a dissimilar hardware/ 
software backup processor. Four independent bus controllers are used for 
control: one bus controller to each bus. They are isolated from processor 

control in such a way that a single point of failure cannot occur on all four 
buses due to a single processor or bus controller failure. 

The other four GPFC are quad, parallel processor units without a backup 
computer. They connect to the quad buses through four embedded RTUs. The 
RTUs in GPFC 1 and 2 are combination BC/RTU units depending on which mode they 
are in. The redundancy management and FD1R strategy for the GPFCs is the same 
as used in 2B, 2E, and 3B. 

The remaining "dumb" RTUs, number 1-70, are used for sensor/effector data 
acquisition and communications for all devices located in remote areas of the 
aircraft. These are nonpressur ized compartments which are exposed to extremes 
of heat and cold as well as vibration and shock. Because of the expected 
higher failure rates, the RTU redundancy in these areas will be higher. 

Serial commmunicat ion buses from the RTUs to the EMAS will be cross-strapped 
to each actuator. 

The FTC assumes bus control initially when the system is powered up. It 
continues to function as primary bus controller until two processors have 
failed within the FTC. At this point an orderly, scheduled shutdown and 
transfer of the bus controller from the FTC to either GPFC 1 or 2 is begun. 
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Figure 120* - Candidate architecture 4A, partially distr ibuted/MUX. 
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Figure 121. - Details of candidate architecture 4A. 
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Once completed the FTC continues to act as a backup processor for flight- 
critical functions if needed. After two failures have occured in the first 
backup GPFC bus control is transfered again to the other backup bus con- 
troller. The same strategy applies to loss of bus controllers also. This 
means that the system can withstand six processor failures and/or sir t.*s 
controllers with no more than two of each occurring in any one FTC or GPFC. 

The bus controller computer is in charge of global redundancy and systems 
management. It also keeps supervisory control over local and regional man- 
agement which will be assigned to the GPFCs. A common global data base is 
kept in the bus controller and is continuously updated. This facilitates the 
transfer of system status data during system reconfiguration. 

Idle backup processors (spares) are not used in this architecture. Each 
processor has a primary function, but they also have a backup function primary 
functional processor. In this case there are spare functional processing 
units which can be activated by the central controller in the event of a GPFC 
failure. 

DFCS functions: 

• bus control and global redundancy management 

• primary and secondary manual flight control and augmentation 

• propulsion 

• automatic flight controls (autopilot and autothrottle) 

• regional and local redundancy management 

• sensor data acquisition and effector control 

The following functions are dedicated full-time to the following processor 
systems : 

1. GPFC 1 - sensor/effector communication in flight station, nose, and 

forward avionics bay. 

2. GPFC 2 - sensor/effector communication in flight station, nose, and 

forward avionics bay. 

3. GPFC 3 - sensor/ef f ec tor communications in mid-avionics bay 

4. RTU8 1-70 - sensor/effector communications left and right wing, 

empennage, mid avionics bay, forward avionics bay. 

The following are reallocatable functional assignments: 

1. bus control and global redundancy management 

primary processor - FTC 

secondary processor - GPFC 1 then GPFC 2 
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2. primary and secondary manual flight control and augmentation 

a. stabilizer and rudder 
primary processor - GPFC 4 

secondary processor - GPFC 1 then GPFC 2 then GPFC 3 

b. spoilers and ailerons 
primary processor - GPFC 3 

secondary processor - GPFC 2 then GPFC 1 then GPFC 4 

3. propulsion 

a. engine 1 and 3 

b. engine 2 

primary processor - GPFC 4 

secondary processor - GPFC I then GPFC 2 then GPFC 3 

4. automatic flight controls (autopilot and authothrottle) 

primary processor - GPFC 1 
secondary processor - GPFC 2 

5- regional and local redundancy management 

These functions are concerned mainly with managing the redundancy of the 
sensors and effectors in a particular region of the aircraft or about a 
particular axis of control. They will be assigned to the processor which 
is actively controlling that region or axis. 

A single BC has centralized control over one multiplexed data bus. The 
command/response protocol is used to accomplish device multiplexing on each 
individual bus. The basic level of redundancy is to have four RTUs on sepa- 
rate MUX buses which then service one flight-critical sensor/effector group. 
The interface from the RTUs to the EMAS is cross strapped serial, full duplex 
broadcast buses. For the sensors the interface is predominantly noncross- 
strapped analog wires. Because of the large numbers of remote terminals used, 
it is likely that cost and weight restrictions will prevent the remote ter- 
minal units from being independent line replaceable units except where the 
location and interface require it. More than 70 RT units will be embedded 
within existing LRUs (computers, EMAS controllers, avionics, etc.) and will 
share a common power supply with the LRU in which embedded. 
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There are 72 remote terminals located throughout the aircraft. They are 
assigned to the following areas. 

1. Flight Station/Forward Avionics Bay: 12 

3 FTC and 12 BC 

2. Mid Avionics Bay: 4 

3. Aft Avionics Bay: 4 

4. Right Wing: 20 

3. Left Wing: 20 

6 . Empennage : 1 2 

9.3.4 Fligh t management and avion ics data buses . - Candidate Architecture 1 
included the flight management system (FMS) and avionics as a part of the 
architectural description. The type of buses used were ARINC 429 DITS buses 
and the entire bus interface for the FMS and avionics was accounted for with 
respect to cost and weight. These same systems were included with candidates 
2B, 2E, 3B, and 4A by integrating the FMS and avionics on a separate, dual 
MIL-STD-1553 multiplexed bus which is shown in figure 122. Separate inter- 
faces from the FMS and avionics (RA, ILS, IRS, DADS) are provided when needed 
to the flight control system I/O bus. An alternate approach would be to 
provide redundant gateways between the two buses. 


9.4 Subsystem Trades 

9.4.1 Evaluation cri terion . - The trades study final evaluation computes 
quantitative cost, weight, and flight safety reliability data for the five 
candidate architectures. Relative scores are assigned in these areas on the 
basis of the quantitative data. In addition, other qualitative assessments 
were made with respect to additional evaluation criteria. The complete list 
of evaluation criteria is as follows; 

9.4.1. 1 Safety related criteria: 

• Flight Safety Reliability. - In addition to being a requirement, flight 
safety is also a criterion. Since all candidates must meet the minimum 
requirements of 10 y failure probability for a ten hour reference 
flight, only the relative benefits of additional reliability margins 
are assessed. 

• Certif icability. - To design a certificable aircraft based on the IDEA 
requirements is one of the major oojectives. A qualitative assessment 
of the effort to certificate the aircraft is based on all applicable 
FAA Advisory Circulars and Regulations. 



DUAL MIL- STD- 15538 BUSES 
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Figure 122. - Avionics bus for candidates 2B, 2E, 3B, 4A. 


• Invulnerability to Environmental Hazards. - A qualitative assessment of 
hazards created by environmental conditions is assessed. With use of 
composites in an all-electric fly-by-wire aircraft, damage from 
lightning and strong EMI could become a safety factor. The invulner- 
ability of each architecture to these possible hazards is also 
assessed. 

9.4, 1.2 Cost related criteria: 

• Acquisition Cost. - The full-scale engineering development plus pro- 
curement cost for the FCS on 5 development aircraft and 295 production 
aircraft are computed. 
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• Weight Related Cost Penalty. - The weight of each of the five FCS is 
used to assess the weight related penalty. 

9. 4. 1.3 Architectural aspects 

• Technical Risk. - Technical maturity of enabling technologies and 
methodologies used by each of the architectures is expected by the year 
1990. The possibility of failure of any of the candidate architectures 
from reaching maturity by the year 1990 due to complexity or immaturity 
of its enabling technologies are qualitatively assessed. 

• Extended Development Capability. - The flexibility and future growth 
capability of the candidate architecture are qualitatively assessed. 

• Resource Requirements. - The ability of the processor, memory, and bus 
technology to meet the throughput, memory, and bus capacity require- 
ments of each candidate are assessed. 

• Fiber Optic Capability. - The effects of lightning and EMI on the IDEA 
aircraft have not been evaluated while at the same time the decision to 
go completely to a fiber optic, fly-by-light technology can not be made 
because of the relative immaturity of fiber optics when compared to 
wire. A wire medium was chosen with an option to use fiber optics on 
the preferred system if necessary. The inability of an architecture to 
accept fiber optic implementation easily will imply additional cost and 
risk. A qualitative assessment of the ability of each candidate to 
accept a fiber optic implementation was assessed. 

9.4.2 Trade-offs analysis results . - The previous section defined the eval- 
uation criteria and their effect on the overall cost function which will 
determine the preferred IDEA DFCS architecture. This section will evaluate 
the performance of each candidate with respect to each of the criteria, and 
will evaluate the weight of each criterion and how it relates to the total 
cost function. 

9. 4. 2.1 Flight safety reliability: Flight safety reliability is the prob- 

ability that a flight control system will perform all of its critical func- 
tions for the duration of the mission. For this study a 10 hour flight time 
was used, with critical functions including manual, fly-by-wire flight con- 
trols, and stability augmentation in all three axis. Autopilot modes, with 
the exception of automatic landing under Category 3 conditions, are not 
critical. The criticality of the augmentation modes are dependent on the 
aircraft stability margins, so this assumption could be relaxed for some 
airplanes. This assumption does not affect the relative rankings of the 
architectures . 

Failure rates, listed in table 24 for the various components, were devel- 
oped from variety of sources. Failure rates for electronic devices were taken 
from MIL-HDBK-21 7D predictions made on similar units, based on a temperature- 
controlled, pressurized environment. High temperature circuits have been 
assumed to be available for use in such areas as nacelles. Gyros are expected 
to Incorporate ring laser technology with an order of magnitude improvement in 
reliability. 
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TABLE 24. - IDEA COMPONENT FAILURE RATES 


Component 

EMAS Signal Selector 

Low Voltage dc Power Supply 

Redundant Low Voltage dc Power Supply 

Ac Power Supply 

Redundant ac Power Supply 

EMAS Motor Controller 

EMAS Mechanical Parts 

Computer Channel 

Position Sensor 

Rate Gyro 

Accelerometers 

Inertial Reference Unit 

EMAS Motor 

Receiver/Transmitter Units 
for I/O Bus 


Failure Rate 
(Failures per hour) 


0.75 

X 

to' 6 

20 

X 

10" 6 

0.016 

X 

io-* 

85 

X 

io- 6 

0.075 

X 

to" 6 

48 

X 

to’ 6 

2.3 

X 

to’ 6 

35 

X 

to -6 

0.7 

X 

to- 6 

29 

X 

to -6 

74 

X 

1 

e 

r— * 

100 

X 

to’ 6 

48 

X 

to' 6 

3 

X 

to -6 


The electrical power supplies which convert aircraft power into low 
voltage dc power required by the digital circuitry are viewed as critical 
elements in the system. Traditionally, these power supplies have been sig- 
nificant contributors to the failure rate of the airplane systems using 
electronic equipment. The reliability of these power supplies is limited by 
the reliability of discrete devices such as capacitors and diodes- "n the 
case of DFCS, it is often convenient to meet the low-voltage powei ,ds of 
several components from each such supply. This practice can result 
appreciable system reliability degradation if done indiscrlminantly. 

Dual- redundant fail operational low-voltage power supplies are assumed in this 
analysis . 

Failure rates for the EMAS are based on analysis of a unit for which 
detailed design is complete (Sundstrand linear, rotary C-141 aileron EMAS). 
Failure rates for the nodes of the mesh network configuration and the 
receiver/transmitter units of the bus-oriented architectures are predicted on 
the availability of special purpose chip sets, such as those becoming avail- 
able for MIL-STD-1 551B bus protocol. 





Combining the component level failure rates using the Computer-Aided 
Redundant System Reliability Analysis (CARSRA) for the architectures other 
than the mesh-based candidates produced the results of table 25. Manual 
analysis was used for the mesh architectures. This analysis, presented in 
Appendix C is based on a fault tree approach. An ad hoc Fortran program was 
used to perform the computations. 

General conclusions are as follows: 

1. Candidate Architecture 1 (analog signal wires) had the highest 
reliability at two hours but shows the greatest degradation in 
reliability 1/ ten hours (three orders of magnitude). 

2. Candidate Architecture 3B (mesh network) has the highest reliability 
at ten hours and shows the least amount of degradation (less than one 
order of magnitude). 

3. Candidate Architecture 2R (direct serial links) did not meet the 
requirements. 

4. Except for 2B, double fail-operational (quadruplex) redundancy appears 
to be a maximum redundancy required to achieve the necessary flight 
safety regardless of the type of architecture. 

TABLE 25. - IDEA CANDIDATE FCS FLIGHT SAFETY RELIABILITY 


Unreliability 

Flight 

Control System Failure Probability vs. Time 


Time (hours) 

1 

2B 

2E 

3B 

4A 

2 

0.213 x 10~ 12 

-9 

0.961 x 10 

0.140 x 10' 11 

0.636 x 10 -11 

0.434 x 10 -12 

4 

0.170 x 10~ 10 

0.385 x 10" 8 

0.112 x 10“ 10 

O 

* 

UJ 

X 

o 

1 

o 

0.347 x 10 -11 

6 

0.573 x 10 -10 

0.867 x lO -8 

0.377 x 10“ 10 

0.219 x 10' 10 

0.117 x 10" 10 

8 

0.136 x 10" 9 

0.154 x 10 -7 

0.893 x 10 -10 

0.329 x 10 -10 

0 

1 

o 

X 

r^- 

r- 

CM 

O 

10 

0.265 x 10" 9 

0.241 x 10' 7 

0.174 x 10“ 9 

o 

l 

o 

X 

vC 

r-- 

o 

0.541 x 10 _1 ° 


- 1 . 
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Based on the above arguments, candidate architecture 3B has the highest 
reliability rating followed by 4A, 2E, and 1. 

9*4.2. 2 Certif icability: It is apparent that architectures using near-term 

or present-day technology (technology that has been previously validated) have 
a higher degree of certif icability than far-term technologies. Analog signal 
transmission for sensors and effectors has been used successfully for flight 
critical applications on fighter aircraft. Direct-coupled, serial broadcast 
buses such as the ARINC 429 DITS have been used for years for avionics 
applications. The design and operation of these serial broadcast buses are 
simple and robust compared to multiplexed buses where the interaction of 
multiple shared processors, sensors, and effectors complicates system 
validation. 

The mesh network, while having centralized network management and control, 
requires complex software to grow, manage, and reconfigure the network. 

Distributed architectures require complex global operating systems to 
manage redundancy and resource reconfiguration strategies. Communication are 
along a serial bus with no discrete control lines which could assure that a 
fault is shut down. Systems have to be designed to fail passively to assure 
that the bus can be controlled. 

Based on these arguments, Candidate Architecture 1 has the highest rating 
for certif icability followed by 2B, 2E, 3B, and 4A. 

9.4.2. 3 Invulnerability: Architectures which have a high degree of isolation 

between components will have a lower degree of susceptibility to lightning and 
EMI effect, especially when an electrical transmission media is used. A fiber 
optic implementation should eliminate potential problems due to the above 
environmental hazards; however, a fiber optic implementation could create 
further unforeseen problems. An architecture which can use a more mature 
electrical medium while at the same time minimizing environmental hazards is 
more desirable. Both Candidate Architectures 1 and 2B have individual, 
point-to point signal paths which should minimize damage in the event of a 
lightning strike. This assumes that the central computer has been properly 
isolated. The architecture which uses linear multiplexed buses has the high- 
est susceptibility due to the length of the buses and the multiplicity of 
connected equipment on each bus. The mesh network has by far the lowest sus- 
ceptibility due to the interconnected nodes which are electrically isolated at 
each node; damage would not propagate to the vital centralized computer sys- 
tem. Based on the above argument candidate architecture 3B has the highest 
invulnerability rating followed by 1, 2B, 4A, 2E. 

9.4. 2. 4 Aquisition cost and weight related cost: Aquisition cost were 

computed for the computer hardware, software, bus hardware, and wire. Sen- 
sors, effectors, and avionics were common to all candidates and were not 
included in the selection process although they were included in the cost 
input for total life cycle cost to ASSET for the preferred architecture. DFCS 
computer cost were computed based on VLSI/VHSIC technology being developed by 
the Honeywell Corporation which is participating in the government’s VLSI/ 
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VHS1C development program. Reference 18 documents Honeywell’s cost estimate 
for VLS1/VHS1C DFCS integrated circuit components used on a far-term advanced 
tactical fighter. The following methodology was used to compute cost and 
weights for the IDEA candidate architectures: 

1. DFCS subsystems were configured based on a high level design scheme. 

2. Chip sets were proposed to implement the subsystem based on VLSI/VHSIC 
technology using the same approximate level of circuit density per 
chip. 

3. Total chip counts to implement each subsystem, and subsystem cost and 
weight were computed based on the chip’s full-scale engineering 
development cost (nonrecurring cost (NRC)) and production cost 
(recurring cost, (RC)). 

4. Total system cost and weight were computed from the subsystem data and 

the number of required subsystems. 

* 

5. Wire length was computed and its cost and weight was added to the DFCS 
cost and weight. 

6. The software cost was computed using a $/(line of code) cost factor. 
The code length was based on the hardware and software requirements. 

The total cost for each DFCS architecture is shown in table 26. Based on 
this quantitative assessment the candidate with the lowest cost is 3B followed 
by 2E, 4A, 1, 2B. 

DFCS weight has the least impact on total system cost* The weight assess- 
ment is shown in table 27. The weight saving in going from 2E (lowest weight) 
to 1 (highest weight) is 840 pounds. Based on this quantitative assessment 
the candidate with the lowest weight related cost is 2E followed by 4A, 3B, 

2B, end 1 . 


9.4.2. 5 Technical risk: In general, the risks increase as the system designs 

incorporate far-term technologies and untested designs and concepts. The same 
argument used for the level of certif jcability holds for level of risk. The 
Candidate Architecture with the lowest level of risk would be 1 followed by 
2B, 2E , 3B, and 4A. 

9. 4.2.6 Extended development capability: Architectures such as 1 has a low 

flexibility and future growth capability because the dedicated link can only 
service one sensor or effector. The addition of new devices will require 
additional wires to be run from the device to the main computer. The dedi- 
cated, serial AR1NC 429 D1TS buses also require additional buses to be added 
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TABLE 26. - IDEA T)*CS COSTS 


Itemized Cost 

Candidate 

Architecture 

Wire 

($K) 

Computers 

(SK) 

Sof twa re 
($K) 

Rus 

Hardware 

($K) 

Totals ( $M) 
300 Aircraft 

NRC 

RC 

nrc 

RC 

NRC 

RC 

NRC 

PC 

1 

4095 

344 

7291 

R2 

11520 

0 

0 

0 

151 

2R 

195R 

164 

4409 

63 

11520 

0 

19462 

2R9 

192 

2E 

755 

63 

2268 

140 

15520 

0 

19699 

12R5 

151 

3R 

1405 

11R 

2555 

43 

11640 

0 

9248 

142 

116 

4A 

1940 

170 

937? 

i 

143 

11520 

0 

15390 

171 

152 


NRC * Non-recurring cost 
RC * Recurring Costs 


TABLE 27. - IOEA/ WEIGHT 


Itemized Weight 
Candidate 

Architecture 

Wire 

P 'VTinn t - o re 

Bus 

Hardware 

(lb) 

Misc. 

(lb) 

Total 

(lb) 

Length (ft) 

Weight (lb) 

— 

(lb) 

i 

RR671 

1056 

336 

0 

11 

1403 

2R 

24219 

507 

35 

165 

37 

744 


10049 

216 

20 

165 

37 

43R 

3B 

17710 

363 

66 

66 

37 

53? 

4a 

11010 

216 

75 

115 

37 

443 


for each additional avionics device# Hardware changes will he required within 
both the main computer and the added devices. Architecture is more flex- 
ible than 1 because its remote terminals and serial buses allow additional 
devices to be added as lorn? as additional RTTJs are not required. The linear 
MTTX bus architectures (2E and 4A) have the greatest capability because the 
linear bus allows additional devices to be added anwhere on the bus without 
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major hardware changes to the centralized computer. Next to the MUX bus the 
Mesh network bus has the best flexibility and future growth capability. Addi- 
tional nodes can be added locally and linked into adjacent nodes. The archi- 
tecture with the highest flexibility and extended development capability is 2E 
and 4A followed by 3B, 2B, and 1. 

9.4.2. 7 Fiber optics compatibility: Architectures which are compatible with 

fiber optics media have a higher risk associated with using fiber optics 
instead of wire because of the immaturity of fiber optics buses for flight 
controls applications. Some parts of the flight control system are more 
exposed to the EMI/Lightning environment and might require fiber optics data 
buses , while other parts could use wire. 

Candidate architecture 1 has the lowest compatibility with fiber optic 
because the fiber optic transmitting devices operate best in a pulse mode 
rather than a digital signal. A pulse width modulated analog optical system 
could be designed but it would have little advantages over a digital coded 
system. The dedicated links do allow the bus to be partitioned into fiber 
optic and electrical portions. An alternate architecture to 1 would be an 
architecture which uses dedicated crossed strapped , serial data fiber optic 
cable to the EMAS, and dedicated serial data fiber optic cable for the sensors 
which would make as much use of passive fiber optic seusor technology, 
(reference 19). It would offer little advantage over a fiber optic 2B 
architecture. 

The MUX buses have the next lowest compatibility with fiber optics. Due 
to fan out power loss and attenuation loss at the couplers, a half -duplex 
fiber optics bus compatible with MIL-STD-1553 (supports up to 32 remote 
terminals) cannot be built with present passive fiber optic technology. 

Future developments in transmitters, receivers and couplers might make this 
type of bus available; however, the risk factor is high and the cost could be 
prohibitive. 

The architectures with the highest compatibility with fiber optic are 2B 
and 3B. Both of these architectures use data buses which are composed of 
multiple, point-to-point, dedicated, serial, digital data links. These links 
have a single transmitter, a single receiver, and a single cable for trans- 
mission and reception in one direction. Fiber optics technology used to 
implement this type of serial data link is almost mature. Present proposed 
standards and specifications are under development by the SAE AE-9C Fiber 
Optics Subcommittee and there will be applications on the AV-8 aircraft. 

The architecture with the highest fiber optic comparability are 2B and 3B 
followed by 2E, 4A, and l. 

9.4. 2. 8 Resource requirements: Table 28 lists the resource requirements for 

processor speeds, I/O bus speeds, and interprocessor bus speeds. They were 
estimated from tables 22 and 23 based on the Individual candidate architecture 
computer architecture and bus topology. The processor speeds are well within 

1 million operations per second and the total memory requirement is less than 
64K for the flight controls and propulsion functions. These levels are 
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TABLE 28. - IDEA CANDIDATE ARCHITECTURE RESOURCE REQUIREMENTS 





achievable with VLSI/VHSIC technology. Since resource requirements are not an 
issue it will not be included in the evaluation. 


9.5 Choice of Preferred System for IDEA Configuration 

9.5.1 Preferred candidate architecture selection . - The results of the 
trade-off analysis allows the candidates to be scored relative to their per- 
formance for each of the evaluation criteria. Each of the criteria is 
assigned a weighting factor which is relative to the criteria's importance in 
the total cost function. The total grade for each candidate is equal to the 
following expression. 

TG(i) * Summation (i - 1,8) of (WF(j )*GRD(i, j) ] 

TG - total grade 

WF - weighting factor 

GRD - raw grade 

1 - index for each of the candidates 

1 - Candidate Architecture 1 

2 - Candidate Architecture 2B 

3 - Candidate Architecture 2E 

4 - Candidate Architecture 3B 

5 - Candidate Architecture 4A 

j - index for the eight criteria 

! - Reliability WF « 10 

2 - Certificability WF = 8 

3 - Invulnerability WF =» 10 

4 - Acquisition Cost WF * 6 

5 - Weight Related Cost WF = 7 

6 - Technical risk WF = 8 

7 - Extended Development Capability WF * 3 

8 - Fiber Optics Capability WF * 3 

Each weighting factor is ranked from 0 to 10 where 0 corresponds to the 
least important and 10 corresponds to the most important criteria. The 
following scale is used to assign raw grades to each of the candidates for 
each of the criteria. 


1. 

Reliability 

0 - low 

. 10 - high 

2. 

Certificability 

0 - low 

. 10 - high 

3. 

Invulnerability 

0 - low 

. 10 - high 

4. 

Acquisition Cost 

0 - high 

. 10 - low 

5. 

Weight Related Cost 

0 - high 

. 10 - low 

6. 

Technical Risk 

0 - high 

. 10 - low 

7. 

Extended development 
Capability 

0 - low 

. 10 - high 

8. 

Fiber Optics Compatibility 

0 - low 

. 10 - high 
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For this evaluation the highest raw grade and total grade is the most 
desirable grade and indicates the optimum candidate out of those evaluated. 

Table 29 lists the raw grades and weighted grades for each candidate 
architecture and evaluation criteria. The total grade normalized by the sum 
of the weighting factors is shown at the bottom of the matrix. The archi- 
tecture with the highest grade, the preferred architecture, is Candidate 
Architecture 3B, the Centralized/MESH 11 architecture. 


9*5.2 Preferred IDEA digital flight control s yste m descr iption . - The 
Centralized/MESH II architecture has been selected as the preferred IDEA 
flight control system architecture based on the evaluation methodology used in 
Section 9.5. This architecture has been described in Section 9.2.5 and Fig- 
ures 111, 118 and 119. Although sufficient explanation and justification was 
given for this architecture in that subchapter, the outstanding features of 
the MESH will be summarized: 


• centralized OFCS architecture 


• the centralized computer is located in a pressurized, cooled 
compartment 

• propulsion and flight controls functions are integrated into the same 
computer 

• centralized, quadruplex fault tolerant computer 

• frame synchronization is used for the quadruplex processors 

• serial interprocessor buses 

• dissimilar digital backup processor protects against generic software 
errors 

• I/O data bus is a reconf igurable damage/f aul t-tolerant MESH network 

• switched network technology developed by Charles Stark Draper Labs 

• network accomplishes path switching and device and data multiplexing 
using a command response protocol 

• centralized bus control is resident within the fault tolerant processor 

• remotely located nodes can be closely attached or embedded high 
temperature electronics 

• the network is composed of two independent network strata of 16 nodes 
each 


• the switchable nodes are connected by full-duplex, bidirectional serial 
data links 





• the point-to-point data Links are electrically isolated at the nodes 
and easily support fiber optics 

This is a robust design because the network is divided into two indepen- 
dent strata of 16 nodes each and only one stratum is needed for operational 
flight* An unforseen hardware failure within the bus hardware could only 
propagate through one stratum meaning that a single point of failure within 
the MESH network cannot occur. The two management strategies could be 
designed differently to avoid generic bus management errors* In addition four 
direct links from the bus controllers/FTC exist for each group of eight nodes. 

9.5*2. 1 Electric vs. fiber optio media: The use of fiber optic cable rather 

than wire can result in a 22 percent savings in cable weight for the FLS. 

This equates to a reduction of 80 pounds when connector weight is neglected. 
The block fuel reduction is small compared to the reductions achieved in other 
systems. 

Fiber optics can be implemented if it is shown that the FCS has a high 
susceptibility to transients resulting from EMI or lightning strikes. 

9.5. 2. 2 Sem >rs: A skewed sensor arrangement is used such that only 9 sen- 

sors Instead of 12 are required for double fail-operative capability for each 
sensor group (rate gyros, accelerometers) for all three axis. Two sensors are 
located along each axis and three skewed sensors are along vectors on the 
X-Y,X-Z, Y-Z planes at 45 degrees from th^ respective axis. Softwa. a FDI 
algorithms detect and isolate sensor failures on ail three axis. Th # s results 
in a reduction of three rate gyros and three accelerometers. 

Strap-down ring laser gyro ( RLG) inertial reference system (IRS) units are 
used in place of conventional mechanical gyro units. The cost and weight 
advantages are small but the reliability is about three times that of the 
mechanical gyro unit in terms of MTBF hours. The wide bandwidth of the Rl.G 
IRS allows the sensor outputs to be used as backup sensors for the flight 
augmentat Ion. 

9.5. 2.3 Mesh network technology readiness: Since the Mesh network I/O bus is 

the one characteristic that separates the preferred architecture from the 
other architectures, it is necessary to make a general statement regarding the 
ability of the mesh network technology to meet its technology readiness 
deadline. The Mesh network technology has not reached technical maturity; 
however, neither has linear, multiplexed, data bus technology when used for 
flight-critical applications. The mesh network is not the only one limited by 
implementation technology such as electrical or fiber optic media, electronic 
circuitry, or packaging. These limitations are also shared with other 
architectures such as multiplexed data bus architectures and distributed 
architectures. Sufficient time is needed to develop the complex bus 
management software, develop specific designs, and develop assurance methods 
for system validation and certification. On the other hand, the development 
of Mesh network technology is accelerating due to ongoing work which involves 
prototype systems for testing. 
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Reference 17 documents a network simulation which verifies network 
management software for a network similar to the preferred architecture 
network. An actual quadruplex fault tolerant computer was used to run the 
software and manage the network. The results demonstrated that a 4,000 byte 
program could successfully grow, manage, and reconfigure a 16 node network 
through one bus controller. 

Reference 20 documents an iron bird simulation of a mesh network inter- 
faced with an A-7 simulator. The flight computers and mesh network bus were 
implemented in hardware and fault testing was performed with favorable 
results. 

The advanced information processing system (AIPS), under development by 
Draper labs, proposes to use a five port node Mesh network for all I/O and 
interprocessor buses* The AIPS system was designed to meet the information 
processing requirements for a fly-by-wire commercial transport aircraft, 
tactical military aircraft, and manned and unmanned space platforms. The 
system is in the preliminary design stage and will be built and tested on 
AIRLAB at NASA LARC, Phase II cf the AIPS program which calls for building 
and testing a prototype system is scheduled for completion by March, 1986. 
Reference 21 documents the AIPS system specification which includes the Mesh 
network node design. 

9.5,3 Fligh t con t r e syst em i nput for ASSET . 

9.5. 3.1 Aquisition CDSt and weight data: Aquisition cost and weight for the 

preferred architecture wire, computers, and bus hardware have been computed 
and listed in tables 2C and 27. This was added to the cost and weight of the 
remaining IDEA DFCS equipment listed in table 22 and loaded into the ASSET 
flight control data input. 

9.5. 3.2 Maintainability: Maintainability costs enter into total life cycle 

cost data which are evaluated bv ASSET. Life cycle cost were not used for the 
candidate architecture election but maintainability data generated for 
the preferred architecture for input to ASSET 

Tha maintainability aspects of the key components comprising the selected 
architecture is shown in table 30. The man-hour values are predicted on the 
components being located in readily accessable avionics bays where feasible. 
This eliminates the need for using works tands and removing access panels. 
Certain components, e,g., engine controllers, require the use of workstands 
and gaining access through cowl doors. These factors have been considered 
where appropriate. 

9.6 Identif icationn of Critical Technologies 

The following critical technologies for the UEA air raft must be 
available by 1990. 

• Analytical Redundancy - Analytical redundancy is the calculation of 
desired sensor signals using different sensor Inputs and known mathe- 
matical relationships. Currently these calculated signals are used for 
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TABLE 30. - PREFERRED IDEA FCS MAINTAINABILITY 


Component 

qty 

— 

MH/FC* 

MH/FH* 

Matl $/ FC* 

Matl $/FH* 

Throttle Quadrant 

1 

49.1 

163.8 

912.6 

3,042.0 

Column LVDTS 

2 

5.7 

5.7 

336.0 

336.0 

Wheel RVDTS 

2 

5.7 

5.7 

448.0 

448.0 

Pedal LVDTS 

2 

5.7 

5.7 

336.0 

336.0 

AOA Sensors 

4 

844.8 

4,224.0 

16,256.0 

81,280.0 

Side Slip Sensors 

4 

844. S 

4,224.0 

16,256.0 

81,280.0 

Discrete SW. Assy. 

2 

39.4 

785.4 

396.0 

7,920.0 

EFI 

2 

3,281.2 

3,281.2 

75,000.0 

75,000.0 

FAS CDU 

2 

2,898.0 

4,830.0 

16,320.0 

27,200.0 

FCS CDU 

2 

2,898.0 

4,830.0 

16,320.0 

27,200.0 

Maint/Test Panel 

1 

562.5 

562.5 

6,800.0 

6,800.0 

Thrust Rating Panel 

1 

308.0 

616.0 

3,400.0 

6,800.0 

Variable Feel Units 

2 

147.0 

2,940.0 

1,435.0 

28,700.0 

Parallel Trim Servo 

6 

283.5 

5,670.0 

4,305.0 

86,100.0 

Pitch AP System 

2 

1,224.9 

2,041.6 

22,828.8 

38,048.0 

Roll AP System 

2 

1,224.9 

2,041.6 

22,828.8 

38,048.0 

YAW AP System 

2 

1,224.9 

2,041.6 

22,828.8 

38,048.0 

Rate Gyros 

12 

4,073.2 

4,525.7 

10,022.4 

11,136.0 

Accelerometers 

12 

3,056.9 

3,396.6 

87,112.8 

96,792.0 

Spoiler EMAS 

12 

121.2 

12,117.6 

1,449.4 

144,936.0 

Aileron EMAS 

10 

198.9 

19,890.0 

2,340.0 

234,000.0 

Wing Tip Accel. 

4 

1,076.3 

1,195.8 

29,037.6 

32,264.0 

Hor. Stab. EMAS 

4 

83.5 

8,353.8 

936.0 

93,600.0 

Rudder EMAS 

3 

65.0 

6,499.4 

702.0 

70,200.0 

Engine 1 & 3 Contlrs. 

2 

322.0 

6,440.0 

2,800.0 

56,000.0 

Engine 2 Cont' * . 

1 

172.5 

3,450.0 

1,400.0 

28,000.0 

IRV 

3 

2,520.0 

2,520.0 

33,000.0 

33,000.0 

MESH Nodes 

32 

1,177.6 

1,777.6 

8,704.0 

8,740.0 

TOTALS 

28.689.0 107,780.0 

404.470.0 1 

,357,400.0 

*X10 6 MH/FC - Man Hours/Flight Cycle 
Maintenance costs, MC, per flight is: 

MC = MH/FC + t x MH/FH + Matl $/FC + t : 
where t ■ flight time in hours. 

MH/FH • Man Hours/Flight Hour 
x Matl $/FH 



! 

1 


> 


* 

1 




* 

♦ 

t 


rtif 


263 


* 




5 


-**«*►„. 


0 . 




r* ■%+ 


i 


i 


comparison monitoring purposes to aid in isolating a final failure of a 
dual sensor. It has been demonstrated, however, that the recons- 
truction of certain sensor signals can be of sufficient fidelity to be 
used for control law computations. In this case some degree of sta- 
bility margin enhancement may become necessary. Analytical redundancy 
may be applied to the sensor set of the IDEA aircraft to reduce the 
sensor complement for certain sensors or may also be used to increase 
the redundancy of other more critical sensors. Analytical redundancy 
techniques are just beginning to be applied to production systems in 
the area of engine controls. There is still some disagreement as to 
the bandwidth of the estimated sensor signals and the problems this may 
cause with the failure monitoring thresholds and active control 
functions. 

• VHSIC/VLSI - Microcircuits for microprocessor chips (MIL-STD-1 750A) and 
serial data bus chips (MIL-STD-l 553B) will be available in two or three 
chip sets by the late 1980 s. One prediction is that ultrareliable 
embedded processing components will be available In the late 1980’s to 
support digital calculations for flight controls. This increase in 
reliability will be derived from increased integration with reduction 
of chip counts and connections between chips, and aLso by fault toler- 
ance and self-testing mechanisms embedded on the cHos* Chip costs 
will be reduced slightly. However, systems containing the* e new 
devices will not necessarily be low in cost due to increases in system 
redundancy as a result of fly-by-wire design. There is also a trend 
toward increased functional integration which tends to increase costs. 

• High Temperature Electronics - Research and development in high tem- 
perature electronics and in high temperature packaging techniques has 
psignif icantly since work was started in the 1960 f s by NASA for 
application to spacecraft. Research into semiconductor components 
involving high temperatures is on-going at several companies and 
government organizations. These activities can be grouped into the 
following categories: 

1. Developments for relatively short-term reliability as for 
geothermal and oil drilling applications. 

2. High-temperature testing to accelerate failures which would occur 
at normal temperatures, as is done by Bell Laboratories and others. 

3. Those which are being conducted under government sponsorship, such 
as the NAVA1R/NRL/GE program for application to engine controls and 
work being performed at NASA Lewis. 

• Research in packaging technology has been performed by HR Textron using 
existing components. Hybrid techniques have been employed wherein 
semiconductor chips were attached to the package substrate with eutect- 
ics, reducing the thermal path Impedance between the microcircuit pack- 
age and the semiconductor junction from approximately 90°C/watt to 
10°C/watt. This work has been done by the General Electric Company at 
their Evendale Engine Division in applications related to the FADEC 
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engine control program. High temperature electronics will be appli- 
cable to the IDEA flight control system in the areas of bus interface 
electronics, engine control, and smart servoactuators. These appli- 
cations call for electronics to operate in uncontrolled environments 
within the aircraft which experience temperature extremes during normal 
operation. 

Fiberoptics - Fiberoptic data communications offer three basic 
advantages over conventional cables: 

1. Greater bandwidth over longer distances. 

2. Improved physical characteristics (e.g., lighter weight). 

3. Increased channel integrity (e.g., EMI Immunity). 

The unique physical characteristics of fiberoptic cables offer sig- 
nificant benefits. They are small in size and very light in weight. In 
addition since fiberoptic cables contain no conductive materials, they 
are not potential current paths, do not require any grounding, and can- 
not cause short circuits. The last feature is of importance if the 
cables must be routed through potentially explosive areas (e.g., fuel 
tanks). Finally, fiberoptic cables are not affected by electromagnetic 
interference (EMI) produced by power distribution, relay switching, or 
lightning. From the above it can be seen that fiber optic communica- 
tion has considerable appeal for application to the IDEA aircraft. The 
EMI characteristics, light weight, and high bandwidth will be of con- 
siderable value to the advanced flight control system architecture of 
the IDEA aircraft. 

Programming Languages (Ada) - Ada provides a significant advance in 
program language design and capabilities. Ada is the result of the 
Department of Defense's (DoD) effort to create a single, common higher 
order language for implementing military embedded computer systems. 

The features of Ada were specified to meet the requirements for pro- 
gramming language with considerable expressive power covering a wide 
variety of applications from large ground-based systems to airborne 
flight-critical systems. The applicability of Ada to the IDEA aircraft 
flight control system will derive from the effort expended by the DoD 
to provide program development support environments, efficient run-time 
libraries, and the reuseable software that is generated for flight 
controls application. By applying reuseable software the certification 
tasks associated with the software may be reduced. 

High Speed Data Buses - Depending on the amount of information to he 
transferred or the rate at which it must be updated, there will be a 
need for a high speed data bus operating at speed of 10 MHz or higher. 
The SAE AE-9B subcommittee on high speed data buses (HSDB) has begun 
efforts to replace the current MIL-STD-1553B (I MHz) data bus with a 
higher speed bus that would be adequate for future integrated system 
requirements. This new higher speed information transfer system (ITS) 
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will employ aa operational protocol that will provide the various sys- 
tems on the bus and their sensors with independence and fault isola- 
tion, as well as distributed control of the common data bus* This last 
characteristic, distributed control, is a major departure from the 
current MIL-STD-1553B data bus, which uses a command response protocol. 
Due to the increased integration within the flight control system a 
high speed data bus will have broad application to the IDEA aircraft. 

A bus of the type currently under consideration would be applicable to 
both the MESH network and the more conventional parallel redundant bus 
implementation* In addition a high speed bus would be applicable to 
the power control system as well. 

• Software Fault Tolerance - Fault-tolerant software design techniques 
have been developed to be used in the design and development of soft- 
ware and hardware, which itself will be tolerant of software faults* A 
software fault is defined as a design defect in the introduced during 
the software development cycle. The appearance of a software fault 
places the system in an erroneous state which may cause the system to 
fail. Software faults may be due to incorrect specification, incorrect 
algorithm, incorrect logic, coding mistakes, etc. Approaches to soft- 
ware fault tolerance include n-version programming, recovery blocks, 
and hybrid techniques. Software fault tolerance will have a signifi- 
cant impact on the IDEA flight control system due to its heavy reliance 
on software-based digital systems* As software fault tolerance tech- 
niques mature they will help bound the verification and validation 
tasks necessary for certification. 

• Fault-Tolerant Processors - Considerable work has been done improving 
the reliability of digital flight control computers. Three advanced 
fault-tolerant computer systems are currently under development for 
possible application to digital flight control systems. These are: 

1. Software implementation fault tolerance (SIFT) 

2. Fault -tolerant multiprocessor (FTMP) 

3. Multimicropiocessor flight control system (MFCS) 

The first two fault-tolerant computer concepts achieve fault tolerance 
through reassignment of tasks among available processors. Task 
reallocation is necessary because the two systems are based on the use 
of multiple processors operating in parallel to obtain the required 
throughput. If a processor performing a critical task fails, another 
must be reconfigured to take its place. The primary differences 
between SIFT and FTMP is the method of detecting failures. SIFT relies 
on software implemented fault detection, whereas FTMP utilizes hardware 
hit-synchronization. Each of these approaches has unique problems 
associated with it. Since SIFT utilizes software for fault detection 
the software must be error free which coraolicates the validation tasks. 
FTMP, due to the reliance placed on bit-synchronization, must ensure 
that all processors are in lock-step, which requires a fault-tolerant 
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master clock. Solutions to these problems have been proposed by the 
associated contractor. 

2 

The Multimicroprocessor Flight Control System (M FCS) is an ultra- 
reliable flight control system developed by the Honeywell Systems & 
Research Center. The design of the M Z FCS is based on two conceptual 
building blocks, the self -checking pair and the information transfer 
system. The self -checking pair concept uses processors and bus pairs 
as the basic unit of redundancy. Each processor and bus in the system 
is paired. The halves of a pair perform identical functions on 
identical inputs. Non-identical outputs disconnect the pair from the 
rest of the system. The information transfer system is tolerant of its 
own internal faults and is protected against external hazards. The 
information transfer system also allows the consistent exchange of 
data. 

• Bus Network - Mesh bus networks are major variants of standard multi- 
plex systems. The topology of mesh networks is one in which 
subscribers contain, or adjoin, repeater and switching circuitry 
referred to as nodes. Each port interfaces one end of a link. All 
links are full-duplex so that commands can be sent to reconfigure the 
network despite the presence of anomalous transmissions from a 
subscriber to a node. 

From this basic ability to reconfigure the bus routing high-survival 
chaeteristics of the network are derived. Note that once a bus has 
been created, it operates exactly as a true bus using standard bus 
protocols. Thus, there ar no operational overheads associated with 
the operation of the virtual bus beyond those imposed by a standard bus 
and an initial setup or confiuration procedure. 

A mesh data distribution network will provide for highly reliable data 
transfer for the IDEA flight control system. In addition to providing 
high reliability, the mesh network, if provided with adequate spare 
nodes and links, may provide the capability of dispatching the aircraft 
with a known failure witnin the data distribution system. This would 
lower maintenance costs by allowing an increase in the time between 
maintenance and also reduce operational costs by being able to dispatch 
with an existing failure. 

• Surface Segmentation - Surface segmentation is a form of redundancy 
where a particular surface (i.e., elevator) is segmented (split) to 
increase the probability of operation after a failure. Generally sur- 
face segmentation is used to increase the survivability of tactical 
aircraft against weapon hits. If one of the segments of a surface 
receives a weapon hit or if the actuator should jam or fail then the 
other segment will still provide a limited amount of control power. 

The aircraft will still be controllable but with a certain amount of 
degradation. Another advantage of surface segmentation is that it 
simplifies the actuator interface to the surface since the system has 
more tolerance to an actuator jam. Surface segmentation may be appli- 
cable to the IDEA aircraft for preventing actuator jam from disabling a 
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particular control axis. This Is an area that will be driven by cost 
trades between actuator complexity for a single surface and the reduced 
complexity for a segmented surface. 

• Dissimilar Redundancy - Dissimilar redundancy is applied to avoid a 
generic fault from disabling a system by simultaneously falling all 
channels at once. Dissimilar redundancy may be applied to both hard- 
ware and software systems. A current example of dissimilar redundancy 
is the Space Shuttle which uses an independent fifth backup computer 
programmed in a different language from the four primary computers. 
Dissimilar redundant systems ha'*e been developed and may be used for 
implementing essential subsystems for IDEA. 

• Assurance Technology - Assurance technology consists of all facets of 
showing (assuring) that the flight control system is safe and meets the 
requirements of FAA Advisory Circulars 1309-1 and 20-115. Currently 
aircraft software based systems are developed and validated under the 
guidelines of RTCA DO-178 which outlines a development process for the 
operational software. This document currently only addresses flight- 
phase critical systems (i.e.. Autoland) and will have to be expanded to 
cover full-phase critical systems such as relaxed static stability 
augmentation systems. Work in the areas of design methodologies, 
verification testing, formal proofs of correctness, and bounding the 
validation tasks must be addressed for the introduction of the IDEA 
aircraft. 

• Integrated Maintenance Concepts - Integrated maintenance concepts will 
utilize the increased computational power of digital flight control 
systems to enhance in-flight monitoring of the total flight control 
system. Positive identification of failures or transients in flight 
will reduce maintenance time in taking corrective action to repair the 
flight control system. These systems will be able to exploit advanced 
technology to isolate failures to the card level and possibly to the 
chip level within the IDEA flight control system. Included within 
these systems or within the ground support equipment will be expert 
systems to aid maintenance personnel in diagnosing problems and taking 
corrective action. 


9.7 FCS Plans and Resources for Technology Readiness 

To ensure the timely availability of the benefits realizable through IDEA 
configurations, it is essential that certain FCS technology needs to be 
addressed responsively in the near term. This entails the definition, justi- 
fication, and execution of an FCS technology readiness plan that ultimately 
permits the safe and dependable implementation of full-time flight-critical 
DFCSs. In turn, this necessitates careful prioritization of need, as well as 
the recognition of existing technology initiatives, to direct the proper 
allocation of research resources. 
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The previous section described the preferred IDEA FCS architecture and 
disclosed its composition, while section 9.2 identified certain tradeoffs that 
refine its attributes. Crucial among the latter are implementation risk and 
ease of validation which expand into an array of technology needs. Since the 
background for these needs is discussed in the next section, the Intent here 
is to define a strategy for fulfilling them. 

9.7.1 F CS enab ling technolo gy needs fo r IDEA . -Basically, sufficient 
practitioner-oriented technolc ^ must be secure to design, implement, install, 
and validate IDEA FCSs on a consistent, dependable, and credible basis, for 
fulltime flight-critical DFCSs. This needs to done in a systematic, highly 
coordinated manner. As a unifying point of departure then, the first need is 
assurance-driven system development jjethodology that fosters, enables, and 
resolves system failure rates of 10 or less. It should also facilitate 
system integration on a technically mature level. 

The major and as yet unresolved concerns over achieving such a methodology 
are the quantification of software system reliability, the overall adequacy of 
fault tolerance, and system robustness in the installation environment. These 
concerns in turn expand out into the more specific issues given in figure 123. 
For the present, however, the higher-level concerns merit further assessment 
in the context of a total system development methodology. 

System reliability - Dec 1 * nstratlng compliance with FAA Advisory Circular 
(AC) 25.1309-1 for critical system function would be currently a virtually 
intractable undertaking for a DFCS because of inability to characterize the 
impact of software discrepancies. Existing software reliability models have 
not proven very accurate or consistent, nor have they been able to capture the 
effects of combined hardware/ software interactions. Since even the promise of 
acceptability for critical applications does not appear to exist, entirely new 
approaches and methods would seem proper. In any case, software system reli- 
ability constitutes an urgent IDEA need. 



Figure 123. - Enabling techology needs. 
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Fault tolerance - Not only must fault tolerance be devised and validated 
primarily at a system level, but it must be carefully tailored to particular 
applications. System resources must be allocated in a manner that affords an 
overall balanced fault protection. The dominant concern in redundant DFCSs at 
present, however, is strictly software based; this is the possibility of a 
generic software error that coincidentally appears in all channels. Since all 
channels would manifest the same anomal 'ms behavior the system could not 
detect or compensate for the error. 

Some form of dissimilar software is required to achieve tolerance of 
software faults. This could take the form of dissimilar software in different 
computational channels or a type of software fault tolerance such as n-version 
programming. In either case, the software to achieve this has yet to be 
developed. This results largely from the need to maintain close coordination 
among wide-bandwidth, redundant channels. The enabling technology is 
particularly weak in the case of fault -tolerant software which is very 
application dependent. 

As evident in the IDEA reliability analyses, major leverage for system 
improvements lies in better electrical power distribution and control systems, 
as well as in upgraded electronic power supplies. The former issue is most 
acute in the case of an all-electric aircraft, and the latter in the case of a 
safety-critical system. Both concerns need to receive some of the emphasis 
currently accorded to electrical power generation. 

Environmental robustness - Digital flight systems have been rather sus- 
ceptible to aspects of the environment within an aircraft including 
temperature extremes, humidity, and vibration, electrical power transients and 
electromagnetic interference (EMI); and poor heat sinking at device mounting 
points and exposure to inadvertent damage by humans. 

The environmental implications for the electronics are particularly 
formidable. Basically, there is a need for certain quasi -standard components 
that can be servicable over a range of installation conditions. For example, 
the same type of mesh network node should be dispersed over the aircraft, 
couceivably with temperature extremes being encountered simultaneously in the 
nacelles and in the wings. The high temperature concerns may be further be 
accentuated by components being mounted on composite materials which are 
generally thermal insulators. 

Thermal cycling, moreover, is of concern with regard to fiber optic con- 
ductors, which tend to exhibit increased attenuation over curved spans due to 
differing increments of expansion/ contraction. Susceptibility to electrical 
power transients is another concern, and it applies to both electro-optic 
converters in fiberoptics systems and electrical bus media. This is only one 
aspect of the concerns regarding the integrity of data buses which must 
incorporate means to withstand or recover from transient disturbances. 

Validation conclusiveness: The conclusiveness of system validation 

depends on all three of the foregoing technology needs coupled with other 
assurance technologies. The latter are of course the subject of concern here. 
For clarification, system validation here is used in essentially the same 
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meaning as FAA certification, and hence validation activities are considered 
to begin long before the onset of actual validation testing. Technology needs 
as derived from IDEA FCS requirements, moreover, indicate that validation 
activities must begin at the initiation of the system development cycle, l.e., 
when FCS requirements are being defined. 

The pivotal assurance technologies that focus on system structure, as 
opposed to system function. Include rapid protoyplng, design verification, and 
software complexity metrics. 

Briefly, rapid prototyping is needed to confirm user requirements and to 
alleviate technical risk at the outset of the development cycle. This becomes 
increasingly Important as DFCSs become more sophisticated and safety-critical. 
Rigorous design verification is essential to ensure the existence of and 
compliance with an explicit and precise design solution. Only then can system 
implementation begin, and only then is there an adequate basis for subsequent 
system validation. Aside from design utilitiy, software complexity metrics 
offer a possible basis for quantifying validation test requirements and 
coverage actually achieved. 

9.7.2 FCS t e chnology re adi ness pla n. - Many diverse technology initiatives 
promise to contribute tcTThe realfzatlon of IDEA^oriented FCSs. In some 
cases, the motivation is somewhat different from the present application, but 
the Intended results may translate well into the IDEA context. To avoid 
redundant R&T efforts it is essential to acknowledge such programs. It should 
be noted, however, that while all of the IDEA -essential enabling technologies 
are currently being investigated in some sense, there still remains the need 
to formulate certain new projects to ensure fulfillment of the DFCS technology 
needs for the realization of IDEA configurations in the early 1990s. 

A summary of prioritized technology needs is presented in figure 123, 
along with suggestions regarding R&T emphasis. To Indicate interrelationships 
and Interdependencies among technology elements, figure 124 depicts a 
technology roadmap to provide the desired technology readiness for 
IDEA-oriented DFCS. Refinement and implementation of this plan of course 
involves considerable definition beyond that offered here, but that presented 
is deemed to be a sound nucleus for fcllow-on R&T activities. 

9.7.3 Technologie s app ropri ate for government support . - Figure 125 shows a 
list of technologies which are appropriate for government support along with 
schedules and resources. The technologies are indeed high risk due to their 
lack of maturity compared to other technologies. Unlike other technologies, 
(energy efficient engine, advanced electrical power systems, electromechanical 
actuation, etc.,) the development of these DFCS enabling technologies has not 
been driven by economic incentives which have promoted development of other 
technologies by private industry. However, these critical path technologies 
will enable high payoffs. Without them the IDEA aircraft would be 
unachievable. 
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Figure 124. - DECS enabling technology roadmap. 
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Robust electronics and fault-tolerant power supply technology development 
should be mature prior to 1988 so that preliminary design can proceed on 
schedule. Fault- tolerant electronic power supplies incorporate fault-tolerant 
concepts with robust electronics and its development will lag robust 
electronics by two years. 

Fault-tolerant electrical power distribution and control will also lag the 
development of robust electronics by two years. This program would consist of 
designing power distribution aud control devices suitable for flight-critical 
electrical power systems! design of fault-tolerant distribution a nr. ' rol 

algorithms, and laboratory testing to validate a prototype system , , :j fy 
all concepts and devices. 

Software reliability will mainly involve validation of DFCS ant »er*r - 
power system software to assure reliable software. Its development 
proceed from 1985 through to certification since it is not design ori * 
Software fault-tolerance will proceed from i985 up to project go-ahea*- 
at which time a decision must be made regarding the desired software ta - in- 
tolerant technique and the processor requirements for that technique. 

MUX bus integrity mostly involves laboratory testing of a representative 
IDEA DFCS bus to determine its integrity in a high EMI environment or in the 
presence of a lightning strike. It will also be necessary to evaluate the 
decreased protection due to use of composite structures. The evaluation 
should be completed by the beginning of the preliminary design phase so that 
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decisions regarding system protection, communications media, etc, can be made. 
This development will lag robust electronics because the desired level of MUX 
bus integrity will be dependent to some extent on the components. 
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10. AEROELASTIC DESIGN CONSIDERATIONS FOR ALTERNATE 1 SA AIRPLANE 

In the Alternate IDEA, the aircraft design constraints are relaxed without 
violating the intent of FAR Part 25 or Part 36 to determine whether 
synergistic relationships exist between aircraft design and IDEA concepts. 

The aircraft must satisfy the payload, range and other performance 
requirements of Lection 1.4.2. In this chapter some fundamental changes in 
aircraft design criteria are discussed. These changes will te possible with 
the implementation of the IDEA concepts. Some additional advanc-s in the 
electric secondary power systems (consistent with a post-1994 certification 
date) are discussed in Chapter 11. The twaulta. benefits are described in 
Chapter 13. 

The wing design of an advanced transport will incorporate technologies 
that will be primarily directed to increasing fi "»1 economy. The goal is to 
optimise the design for minimum drag within the constraints of safety 
criteria. 

The individual technologies to control maneuver loads, flutter, ride 
quality, reduced static stability, elastic response, gust loads alleviation, 
and handling quality have been demonstrated by active and passive means. 

There are no demonstrations of all of these functions integrated Ir. one design 
process. A paper by Jurey and Rauovcich (ref. 22) demonstrated the 
integration of the active control functions for flutter, handling qualities, 
gust load control, and ride quality on a supersonic cruise vehicle 
configuration using just tv. control system surfaces. 

There have been extensive flight experiences with active control systems 
in commercial transports. The L-1011-500 ACS airplane is currently flying an 
active control system for maneuver load control, elastic load suppression and 
gust alleviation. Flutter margin enhancement was demonstrated on an L-1011 
test airplane using either the outboard ailerons or horizontal stabilizer for 
increasing stability of an in-flight low damped mode. The feasibility of 
reduced static stability was also demonstrated by flight testing. 

The rapid development of digital implementation of autopilot functions 
provides the basis for the conceptual integration of these aeroel&t.lc design 
functions into a single advanced flight management system. 

The design of structures for aeroelastic effects, within the preliminary 
design schedule constaints, has been making steady progress with the work of 
Dr. Sobleski of NASA-LaRC in the multilevel optimization approach. One 
example of the many design tools under development in the industry is 
Preliminary Aeroelas.ic Design of Structures (PADS) (ref. 23 a.d 24). 

Active control and flight control systems couplro with the development of 
advanced flight control computer technology, rapid aeroelastic design of 
structures, and advanced flight simulation techniques provide bases for the 
Alternate IDEA airplane proposal. 
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10.1 Problem Definition 
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How can aeroelastlc design exploit advanced flight management system 
tech s'-jgy? 

Traditional feedback '.ontrol systems are limited in their ability to 
reduce structural weight. For example, figure 126 shows that 80 percent of 
the wing cover weight reduction occurs within SO percent of the optimum 
ciluron gain for maneuver load control (ref. 24, figure 42). 

The Alternate IDEA airplane concept as proposed here must be able to 
exploit not only the application of the new technology in flight critical 
control systems but the synergisms of combining active control technology, 
advanced digital flight control concepts, the all electric airplane tech- 
nology, and the integration of these technologies into the aeroelastlc and 
performance design. Figure 127 shows the technologies which are required to 
achieve the goals within the spec ' led design requirement constraints. This 
figure emphasizes the need to consider the design process as an integrated 
design activity rather than the design of separate loosely coupled systems. 

The tools used in preliminary design are listed as ASSET, CADAM, and PADS. 

The one factor that has great potential in reducing structural weight for 
all configurations, especially a large impact on the more refined designs oi 
the future, is the possibility of changing current structural design criteria. 
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Figure 126. - Wing cover weights for different MLC aileron gains. 
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Figure 127. - Integrated preliminary design process. 


The role of the advanced flight critical control concepts together with 
the traditional feedback control systems and advanced sensor technology is to 
provide the tool to maintain the safety of existing airplanes when existing 
criteria such as design maneuver load factor are altered. 


10.2 Alternate IDEA Airplane Concepts 

The approach to an Alternate IDEA airplane wing design will be an Integra* 
tion of active controls, advanced flight control concepts, wing material 
placement optimization, wing configuration definition, and airplane perfor- 
mance. The Alternate IDEA airplane will have a high degree of computer tech- 
nology mechanized into the primary flight control systems. The same computers 
will also serve both the aeroelastic requirements as well as the propulsion 
functions in one Integrated architecture. 

The incorporation of the computer technology Into the primary flight con- 
trol systems to reduce significantly structural weight will require high 
functional reliability associated with advanced architectures . 

10.2.1 The c entral theme . -With the proposed level of computer technology to 
be integrated in the flight control system the pilot interaction with the 
airplane control may be open to review. It is possible to think of the com- 
puter providing the pilot an airplane platform which is stabilized relative to 
gust and wind shear disturbances. If the scenarios of gust and wind shear 
disturbances that generate high g maneuvers and/or hazardous upsets for 
current airplane designs could be identified, they could be used to define a 
computerized control system that would lower the maneuver load factor 
response. This lower level of maneuver g f s may form the basis for lowering 
design loads. This proposal, as summarized in figure 128, is a preliminary 
look at changing the design criteria to save structural weight. 
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• REDUCE THE MAXIMUM LIMIT MANEUVER LOAD FACTOR 

CURRENT FAR 25 REQUIREMENTS FOR SYMMETRICAL 
MANEUVERS (A SUBSET) 

-1 TO +2.5 FOR SPEEDS UP TO V c /M c 

0 TO 2.5 AT V d /M d 

0 TO +2.0 WITH FLAPS EXTENDED 


• REDUCE THE PROBABILITY OF HIGH MANEUVER LOAD 
FACTORS WITHOUT REDUCING THE LEVEL OF SAFETY 
PROVIDED BY CURRENT DESIGN CRITERIA 

? Figure 128. - Proposal. 

However, there are other considerations that enter into the design of the 
wing besides maneuver and gust loads; namely landing and taxiing loads, ground 
handling, deflection constraints, etc. An airplane design would be required 
to focus the integration of various technologies required to evaluate the 
potential payoffs in these various areas. 

•{ 

» 10.2.2 Advanced flight control concepts . - The advanced flight control con- 

+ cepts will have additional features over and above the functions attributable 

to flight critical systems. If the computer Integration into the basic air- 
• plane operation were to be promoted to a level where the pilot made commands 

j to a computer which in turn configures the control surfaces deflections, 

I engine power settings, etc. to satisfy the flight path requirements, then 

f there would be a means to develop additional concepts that could be critical 

to the realization of substantial structural weight savings. 

10.2.2.1 Advanced flight control manager: The Advanced Flight Control Manager 
(AFCM) has three concepts to be offered for consideration, namely the expert 
system, the loads and flight envelope limiter, and the airplane systems 
resource integrator. 

The expert system is resident onboard the airplane and would be available 
to the AFCM in its stand-alone mode and to the flight crew through some high 
level language for queries. The expert system would contain predefined 
actions based on the state of the airplane and its subsystems. It will func- 
tion much like the flight manual which defines pilot's response to certain 
observable cues. The expert system could operate online during the flight and 
Inform the flight crew of the systems status and the recommended course of 
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action. The advantage of an expert system over the flight manual is the 
access to orders of magnitude more data on the state of the airplane and the 
shorter time response to define the recommended course of action. 

The loads and flight envelope limiting function to be explored within the 
AFCM architecture is the feasibility of maneuver and gust load limiting to 
levels related to airplane strength, and envelope limiting related to positive 
flutter margin requirements. One of the key elements of this function is AFCM 
knowing what flight condition the airplane is in at all times. For example, 
weight, center of gravity, airspeed, and altitude at any given time during the 
flight define the maneuver and gust loads capability of the airplane. The 
AFCM could take advantage of available airplane strength and flutter margins 
in responding to an emergency. 

The third AFCM concept is the integration of the airplane flight and load 
control resources to respond to a flight path disturbance when given that 
authority by the flight crew. Some examples may include: 

• the automatic rudder, aileron, engine power settings, and angle-of- 
attack compensation for engine out condition on take-off. 

• the automatic adjustment of airspeed for severe gust penetration 
requirements, and the adjustment of gust loads control gains. 

• the automatic configuration of the airplane to minimize the upset 
condition due to severe wind shear and the initiation of a recovery 
procedure. 

• the flying of precise trajectories during emergencies such as 
decompression. 

• providing options to the pilot while on emergency is in progress and 
the AFCM is initiating the first option. 

• providing reduced work load in flying the airplane and giving the crew 
more time to optimize the operation of the airplane. 

• Integrating collision avoidance information from onboard and ground 
station inputs. 

10.2.2.2 Advanced displays and flight crew interactions: The issue of flight 
crew interaction with the Advanced Flight Control concepts will not be 
explored here at any depth. The man-machine interface is not trivial when 
concepts of an existing operation will probably have to be integrated into the 
new system. Progress in this area is accelerating, especially in advanced 
displays. The Space Shuttle Program should provide timely experience 
concerning the question of the man-machine interface for an aircraft. Also, 
advanced fighter configurations will address this problem in the near future. 

10.2.2.3 Advanced sensor technology: In order to exploit the full potential 
of active control concepts, it will be necessary to define sensor performance 
requirements which may not be satisfied with current sensor technology. For 
example, most current active control load alleviation concepts use the air- 
plane c.g. acceleration as one of the sensed quantities. The load alleviation 
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benefits are usually local, such as redistribution of wing loads to reduce 
wing bending moments. With a good lead type sensor the alleviation of air- 
plane response (e.g., airplane acceleration) can be realized by reducing the 
loads on most or all components on the airplane. 

With lead-type sensors, in-house studies indicated that gust loads could 
be reduced both in the wing and in the horizontal tall. Without lead-type 
sensors, only the wing loads could be reduced but with significantly larger 
feedback control gains. Exploration of the Alternate IDEA airplane concepts 
should include the establishment of advanced sensor requirements, as well as 
other supporting technology requirements. 

10.2.3 AFC and IDEA concepts . - The Advanced Flight Control Concept is 
illustrated in figure 129. The figure shows that the electric technology may 
be required to achieve the required reliability and performance. The key to 
this approach is the AFCM which is separate from the traditional functions 
assigned to loads control, RSS, and flutter control and takes into account the 
capability of the airplane as part of the process of doing what is commanded 
by the pilot. The Advanced Flight Control Manager integrates sensor data, 
pilot inputs, airplane loads and flutter capabilities, traditional flight 
management system directives and produces propulsion and control surface 
deflections that 'best' satisfy built in directives. The Advanced Flight 
Control Manager will reduce the probability of experiencing high loads due to 
gust or wind shear by configuring the airplane to minimize potentially large 
aircraft responses. A possible flight control system configuration is shown 
in f igure 1 30 . 

10.2.4 Advanced aircraft configuration designs . - Under Preliminary 
Aeroelastic Design of Structures (PADS), a number of aeroelasic designs are 
being generated for high aspect ratio wings with different sweeps. The wing 
technology design base is the L-101 1-500 ACS airplane which was used to check 
out the current design modules within PADS. This program could serve as bases 
for evaluating the trade-offs between high aspect ratio wings which produce 
larger wing weights and decreased drag with t/c and sweep variations. 


10.3 Current FAA Policy 

Current FAA policy will not allow the full exploitation of the active 
control technology to control loads and flutter. Along with the design 
process there must be a parallel study to define the limits of design criteria 
which would be acceptable to the FAA. The current criteria provide different 
levels of safety on different structural components depending on the type of 
loading, e.g., maneuver or gust loads. 

The key issue on criteria changes is the concept of equivalent Saiety. It 
must be proven that airplanes designed to new criteria will have safety 
equivalent to existing airplanes. By investigating the different types of 
loading and defining the criteria such that each type provides a statistically 
equivalent level of safety, excess structural weight can be removed without 
affecting the level of safety provided by the current criteria. Maneuver 
design criteria, based on statistical data and mission analysis, similar to 
gust design criteria currently in use, is a means of arriving at consistent 
criteria for different types of loading. 
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Figure 129. - Advanced flight control concept. 
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Figure 130. - Flight control system configuration. 
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10.4 Quantitative Results and the Payoff 

At this stage, It Is almost impossible to establish what will be the 
quantitative results if active control* aeroelastic tailoring, advanced com- 
puter technology, supercritical airfoils, and new design criteria were inte- 
grated into a design of a new wing. Flutter prevention and high gust loads, 
if a problem, may not be the only major problems of a high aspect ratio wing 
design. The proposed means to exploit the potential of a design which incor- 
porates this advanced technology is to focus on a particular family of designs 
where trade-offs are made and critical design elements identified. 

One possibility is the relaxing of the 2.5 g requirement for maneuver 
loads. In order to achieve this relaxation a number of issues must be 
investigated to determine the feasibility and level of reduction. However, as 
a first cut at the potential payoffs, an arbitrary reduction of the 2.5 g 
maneuver limit load requirement to 2.0 g was made and a number of sensitivity 
wing design calculations were processed through the PADS program (ref. 24). 

The reference aircraft (for this exercise, although not for the IDEA 
configuration) has an aspect ratio of 7.63 and a sweep of 35 degrees. The 
design technology base incorporates the L-1011-500 ACS requirements. PADS 
aeroelastic model for the transport configuration includes the sizing of the 
cover panels for buckling and stress. The sizing program uses the same 
criteria as was used in the L-1011 certification calculations. The structural 
model is a full 3-D finite element model and sizings included panel covers for 
upper and lower surfaces along four chordwise bays, as shown in figures 131 
and 132. The high aspect ratio wing design did not include dynamic gust 
loads. The study included maneuver load control and aspect ratio sensitivity 
computations • 

Figure 133 summarizes the results for an aspect ratio 12 wing with 35° 
sweep. The wing weight reduction was 11.7 percent when the maneuver limit was 
reduced from 2.5 g to 2 g. The reduction in weight due to maneuver load 
control was 5.1 percent. 

The reduction in wing weight when the TDEA configuration (25° sweep) is 
redesigned for a 2 g maneuver limit is very similar. The resulting reduction 
in block fuel and DOC is described in Chapter 13. 

The relationship between PADS and ASSET is shown in figure 134. 


10.5 Proposed Study Plan 

The objective of the proposed study plan is to mature concepts which have 
been proposed for the Alternate IDEA airplane into a technology database which 
could offer design options for the development of an IDEA configured transport 
aircraft. The oroposed study ha 9 four segments. The strawraan plan defining 
the overall time schedule and the Interaction of the four segments is shown in 
figure 135. 
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Figure 131. - Wing section 3-D structural finite element model. 
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Figure 135. - Advanced flight control concepts development plan 
for alternate IDEA airplane. 

i 

10.5.1 Probabilistic design criterion definition . - The central Issue to the 
feasibility of the full Implementation of reduced design load factors Is the 

establishing of probabilistic design maneuver criteria consistent with i 

criteria associated with gust, taxi, landing, etc. This is a major ; 

undertaking. ! 

} 

10.5.2 Aeroelastlc design studies . - The aeroelastlc design studies will 
Incorporate results and generate design data in support of the probabilistic 
design feasibility study. The primary concern of the aeroelastlc study is to 
Identify the areas which show the most promising structural weight reduction 
and performance increases. The design studies will define typical 

requirements for the definition of the AFCM function and will focus on the * 

particular areas which will require simulation studies. The aeroelastlc • 

studies could proceed on a "what if" basis for a quick definition of the | 

potential payoffs. The aeroelastlc study will also Identify the requirements 
associated with the advanced lead-type sensor development. 

The study will establish the payoffs in wing weight due to reduced load j 

factors, advanced airfoil technology, advanced planform geometries, and active 
control technology. The objective function may be minimum block fuel. 

The proposed study will evaluate flutter requirements. The design loads 
will include gust effects if they are found to be critical. Payoffs for 

advanced active control technology will be identified relative to a known ! 

baseline aircraft and controls technology. Finally assessment of the 
potential payoffs will be summarized. Payoffs for reduced fuel burn will also 
be shown. 
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10.5.3 Definition of the AFCM . - The Initial definition of the AFCM system 
will be dependent on the results of the Probabilistic Design study and the 
aeroelastic design study. The refined definition of the AFCM will Involve the 
recycling of the AFCM results into the first two studies. The time deomain 
simulation studies will constrain the feasible design space of possible 
functions which may be implemented in the AFCM. The definition of the expert 
system will require extensive man-machine interface studies with primary data 
probably available through the Shuttle and advanced fighter programs. 

10.5.4 Time domain study . - The function of the time domain study is to 
identify continually the time domain constraints on the definition of the AFCM 
and to verify the airplane performance in gust and wind shear using the 
advanced flight control concepts. A typical study may take the 2.5 g airplane 
and fly it with a standard flight control system with the pilot in the loop. 

A series of gust and/or shear inputs will cause high load factors and/or upset 
maneuvers. These same conditions will then be imposed on the airplane with 
the full authority flight control system to verify satisfactory performance of 
the system. 


11. ALTERNATE IDEA ELECTRIC SYSTEM 


11.1 Alternate IDEA Secondary Power 

The Alternate IDEA, from a secondary power system standpoint, is impacted 
in this airplane primarily by the changeover from the engine driven fuel and 
lube pumps (in the IDEA) to electrically driven pumps. This change requires 
an upsizing in the individual generator capacities from 150/200 kVA to 220/275 
kVA and a downsizing of the gearbox. The propulsion secondary power system in 
the Alternate IDEA therefore comprises the following: 

3 

# An "E +'' technology engine 

• An "austere + AGB 

S Two 220/27. kVA 

The "austere +” gearbox is a further simplification e£ the auxiliary gearbox 
(AGB) design as a result of the elimination of the fuel/lube pumps and reduced 
accessory drive provisions. The size and torque-capacity of the power 
take-off shaft from the HP spool shaft, however, is not changed, since the 
power for the pumps (originally supplied mechanically) is now furnished by the 
generators in the Alternate IDEA, 

As stated previously, it is possible to consider an integrated engine 
generator (IEG) design for the Alternate IDEA, in which the SmCo rotors of the 
two generators in each power plant are mounted directly over the high pressure 
spool shaft. This technology has been very well investigated and evaluated 
under AFWAL contracts by the General Electric Company and the feasibility has 
been established. Work has also been accomplished by Rolls Royce on the IEG. 

A typical configuration is shown in figure 136. Rolls Royce has a favorable 
perception of the IEG technology, but there is growing opinion that while the 
generator(s) within the engine would completely eliminate an AGB Bystem and 
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Figure 136. - Engine Integrated starter generator (courtesy Rolls Royce). 

Its lubrication problems , the 1EG concept lacks practical viability. Aside 
from the need to design the engine with a good deal of modularity to permit 
fast/easy removal of the bypass fan, there is the electrical consideration 
that the generator rotor speed would be restricted to that of the high 
pressure spool. Typically, the generator rpm could be much higher than the HP 
8 pool speed and this would also be an advantage, during engine starting, since 
the polar moment of Inertia, referred to the S-G (starter-generator) would be 
much reduced. Because of these considerations, the Lockheed opinion also 
tends towards the use of an "austere + AGB”, but it is hard to overlook the 
potential reliability that would come from a gearless -drive configuration for 
the IEG/S. Figure 137 shows a PTO shaft drive configuration on the GE CFM 36 
engine design. 

It will be possible in the Alternate IDEA to use the concept of tandem 
generators as described in the IDEA since, while these generator designs have 
all the appearances of a single machine from the mechanical packaging 
standpoint they are in reality two separate electric machines that take 
advantage of a single cooling loop. Also, by virtue of the integrated design 
concept it is possible in either the side-by-side or in-line configuration to 
synchro-phase the two machines and to parallel them electrically, without the 
problem of dynamic phase misalignments. This paralleling could be ofr 
advantage during starting since they could provide a stlffer power source as 
might be required for the tartlng of large motors. 
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Figure 137. - High bypass turbofan with power takeoff accessory drive 
(courtesy General Electric). 


11.2 Other Electrical Systems for the Alternate IDEA 

In Chapter 10 it was stated that the proliferation of electronic and 
electric technologies was already making possible the application of advanced 
flight control that would permit more sophisticated Interactions between the 
airframe, the propulsion and the flight control systems. This salutary 
relationship permits control of aerodynamically unstable aircraft and, in the 
case of commercial aircraft, the use of an automatic FMS and FADEC (full 
authority digital engine control) systemj that will provide the most 
fuel-efficient operation of the airplane, as it fits into the advanced ATC 
systems. 

The developments in VLSI and VHSIC, and the ever increasing improvements 
in packaging are the most significant enabling technologies in the foreseeable 
development of Alternate IDEA type aircraft. When the Alternate IDEA enters 
into airline service there will be a major Inventory of advanced data sources, 
using laser, Infrared, optical, and other technology. These technology 
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developments will permit the development of "lead -sensors” that could Input 
data Into the flight computers to control the airplane In any environment. 
Clearly, safety will In a key criterion In the Alternate IDEA, so lead-sensors 
could be used to detect wind shear, clear air turbulence (CAT) and gusts to 
permit control of the airplane as a stable platform In rough air conditions, 
etc. A by-product of technologies would be a significant Improvement In 
rlde-quallty and Improved all-weather landing capability. Other safety 
aspects relate to the adoption of sophisticated collision avoidance systems to 
provide a protective sphere around the airplane. This monitoring system would 
detect any penetration of the safety sphere by other aircraft and 
automatically initiate evasl/e action with respect to the computed speed, 
direction, attitude and altitude of the "other" aircraft. An early version of 
this type of system, known as Cockpit Display Traffic Information (CDTI), was 
flown successfully in a L-10I1, but many improvements In CRT resolution and 
Interpretation of its presented data are required. 

There are many enabling electric/electronics technologies that will 
provide significant improvements In the safety and operational performance of 
future advanced aircraft In the time frame of the Alternate IDEA. Many of 
these associated with the sophisticated DFCS will penult wing structural load 
relief and consequent weight Improvements. The development of high capacity 
electric generators/motors will also lead to improved capabilities and more 
innovative, diverse applications of electric machinery. Superconductivity and 
cryogenic cooling are without application in current aircraft, except In a few 
Isolated cases. This technology and the use of exotic power source will 
bring about major changes in the engineering development scenario ot advanced 
aircraft. 

Batteries, fuel cells, thermal batteries, new primary/ secondary batteries 
and exotic batteries using consumable electrodes or liquid electrodes will 
make quantum jumps in energy level capabilities and specific outputs over the 
next twenty years. Where specific outputs are now In the range of 8 to 
20 Wh/lb, the projected maximum theoretical possibilities of known exotic 
battery configurations (such as lithium sulphur, and lithium chloride can 
reach as high as 1200 Wh/lb. The successful development of such b'gh specific 
output batteries will complement the continuing technology developments in 
magnetic material rare earth permanent magnets and new conductor/insulation 
systems. 

Another fertile area for improvement will be in APU technology. Here it 
is clear that the use of powder -metallurgy and ceramics will permit higher 
turbine inlet temperature and higher specific output for less fuel. The all 
electric technology concept applied to the APU will bring about hardware 
simplification and performance improvements. 
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12. IMPACT OF IDEA TECHNOLOGIES 



> 

% 

i 


The impact of IDEA technologies on Direct Operating Cost (DOC) accrue from 
four major effects. 

% 

' 1. Improvement ir. engine performance resulting from bleed elimination. 


2. Reduction in systems and other weight from incorporation of a digital 
flight control system and all-electric secondary power system. 

3. Drag and weight reduction using a pitch active control system (PACS). 
The incorporation of a digital flight control system permits the use 
of PACS. 


4. Improvement in maintainability and reliability. 

The first three effects have an impact on block fuel savings with a 
corresponding reduction in aircraft empty weight as the aircraft is resized to 
achieve the design mission. The savings in block fuel and empty weight in 
turn produce a reduction in DOC. The fourth effect produces a direct saving 
in DOC. 


The impact of IDEA technologies on block fuel is therefore the dominant 
effect in reduction of DOC and will be discussed in more detail. 

When the IDEA technologies discussed in this report are incorporated into 
the aircraft, the ASSET performance and sizing program predicts 11.3 percent 
reduction in block fuel from the baseline configuration. The contributions to 
this reduction may be estimated using sensitivity factors established from 
previous studies. Sensitivity analysis provides a useful, although approxi- 
mate, method of allocating block fuel benefits to the IDEA technologies. The 
sensitivity analysis is summarized in figure 138 in which the changes to the 
aircraft systems impact SFC, thrust, L/D, and OEW when the aircraft is sized 
for the design range of 4600 n.mi. and flown at the average stage length of 
2500 n.mi. The block fuel impact is the product of the percentage change in 
these terms and the block fuel sensitivity factor. The net effect on block 
fuel for the aircraft is calculated by converting the percentage changes in 
block fuel into percentages of the baseline (e.g., a two percent reduction in 
block fuel converts to a block fuel that is 98 percent of the baseline). The 
total impact is found by taking the product of these percentages. This method 
is shown in figure 138 to agree closely with the ASSET prediction and will be 
used to show the impact of the components of the IDEA technologies. 


12.1 Improvement in Engine Performance 

As described in Chapter 8, in the IDEA configuration engine bleed is 
eliminated and the ECS is supplied with fresh air by an electrically driven 
compressor. The basic electric utility loads (e.g., galley and lighting) 
remain unchanged, as shown in figure 139. Actuator loads are slightly reduced 
because recirculation losses inherent in a hydraulic actuation system are 
eliminated. 
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Figure 138. - Estimation of block fuel reduction. 
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Figure 139. - Aircraft power requirements at cruise 





The major difference in secoi dary power extraction between the Baseline 
and IDEA is bleed elimination and the additional electrical power 
requirements. 

3 

Figure 140 shows the impact of bleed and horsepower extraction on the E 
engine at a typical operating condition of 85 percent maximum cruise power of 
35 f 000 ft and M 0.8. The ECS compressors require about 66 hp for each 1 
Ib/sec of air so that the substitution of electrical power for bleed produces 
a net reduction in SFC penalty. Similarly (figure 141) there is also a 
reduction in net thrust loss i.e., a smaller engine may be used to generate 
the same thrust, although the effect on block fuel is small. 


12.2 Systems Weight Reduction 

Systems weight changes to the baseline aircraft before resizing to achieve 
the design mission are shown in figure 142. The weight changes are discussed 
in more detail in the following sections. 

12.2.1 Flight controls . -The implementation of a digital fly-by-wire flight 
control system (DFCS) is described in Chapter 9. The incorporation of the 
DFCS produces weight savings in the autopilot, in mechanisms (through the 
elimination of cables, pulleys, rods, beilcranks, and their associated 
supports), and in multiplexing of electrical controls. The combined impact is 
a reduction of 819 pounds in flight controls weight, (figure 143). 

In addition, there are weight savings from the substitution of hydraulic 
actuators with Electro-Mechanical Actuators (EMA). The major weight reduction 
is in the elimination of plumbing and fluid. The weight of power cables is in 
the accounting of weights under "electrical controls" but cable runs are short 
because power is carried only from the electric power bus to the EMA. The 
weights of the buses themselves appear under the electrical system group 
weights, EMAS produce a net weight saving of 585 pounds. 

12.2.2 Hydraulic wei ght savings . - The plumbing and fluid weights l >wn in 
figure 143 apply only to hydraulic lines which are dedicated to a single 
flight control actuator. Lines which serve more than one actuator appear in 
the hydraulics weight group, and the remaining weight savings from the 
elimination of the nydraulic system are shown in figure 144. The major 
contribution to weight reduction is in plumbing and fluid weights. 

12.2.3 Electric a l system weight savings . - Weight differences are shown in 
figure 145. 

The largest contribution to weight reduction results from multiplexing. 

The wiring weight subject to multiplexing is 1704 pounds; this value includes 
wire weights which appear in other weight groups such as flight controls. 
Multiplexing reduces these wire weights by 1114 pounds, although there is an 
offsetting increase of 266 pounds required for electrical power wiring, giving 
a net weight reduction in wiring of 848 pounds. Of this value 682 pounds is 
attributed to the electrical system weight group. The balance of 166 pounds 
appears in other weight groups. 
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Figure 142. - Systems weights and savings. 
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Figure 143. - Flight controls weight savings. 
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Instruments and their associated avionics were considered outside the 
terms of reference of the study, and their wire weights were therefore not 
included as subject to multiplexing weight reduction. Had these been included 
in the study, it is estimated an additional 500 pounds could have been saved. 

12.2.4 ECS weight savings . - Weight savings are shown in figure 146. The 
weight savings occur in the elimination of bleed air ducting from the engines 
to the ECS packs and elimination of the bleed air precoolers and controls. 

12.2.5 Other weight savings . - In addition to the weight savings described 
above, there are also weight savings in the engine and landing gear (fig- 
ure 147). Elimination of the pneumatic engine starter saves 132 lb/engine. 
Elimination of the starter and CSD drive pads from the accessory gearbox 
permits a more austere gearbox to be used; however, there are now two 
electrical generators/engine, so only one pad is eliminated. Additional 
weight savings can be achieved with the substitution of the thrust reverser 
air motors with electrically driven actuators. 

12.2.6 Net weight reduction . - Net weight savings in systems, propulsion, and 
landing gear amount to 8492 pounds, equivalent to 3.4 percent reduction in 
OEW. Of this weight reduction 819 pounds is attributed to flight control sys- 
tems weights savings resulting from incorporation of the digital FCS. The 
balance of the weight reduction results from the all-electric secondary power 
concepts. The impact of these weight savings on block fuel is about 

3.9 percent. 


12.3 Relaxed Static Stability 

12.3.1 Description . - The digital fly-by-wire flight control system incor- 
porates a pitch active control system which permits the aircraft to be 
balanced with a negative static margin. This results in the benefits to 
aircraft performance resulting from the following effects: 

1. A reduction in tail area reduces skin friction drag. 

2. Reduced tall area saves structural and actuator weights. 

3. Reduced tail download reduces wing lift requirement and hence induced 
drag. 

With the same c.g. range as the baseline configuration, the horizontal 
tail volume coefficient can be reduced to V„ ■ 0.62. This requires a design 
with sufficient redundancy in the augmentation system to ensure that the 
system will not fall. An inadequacy with this approach is that the criteria 
to define the control limits of this aircraft are currently insufficient. A 
suitable definition of these control limits for a particular airplane requires 
a thorough definition of the aerodynamic characteristics (including any 
hlgh-angle-of -attack nonlinearities) and control system networks to be used as 
a mathematical model for a detailed dynamic analysis. This model must then be 
exercised in various levels of turbulence, discrete gusts, and critical flight 
maneuvers to determine combined augmentation and control requirements which 



+* s 



VIA * 



V 


LB 

2 4 6 8 10 12 14 16 18 


BLEED AIR DUCTING 
PRECOOLER & CONTROLS 
BLEED SYSTEM SUPPORTS 
COOLING EQUIPMENT 
DISTRIBUTION DUCTING 
CONTROLS 
INSTALLATION 


I I I I I U .J 1 L 

-1391 


fc’SreXTSSSSreTl -848 


EZZ3-143 


BASELINE 

IDEA 


+48 


^0 

^^0 


TOTALS 





20x100 


-2334 


Figure 146. - Environmental control system weight system. 



Figure 147. - Other weight savings. 


• 296 



• « *'•+***- 


I 













*•> i 


dictate the horizontal tail size and/or maximum aft c.g. location for that 
particular design. The depth of this analysis is beyond the scope of the 
current study. However, it is sufficient to point out that the tail sizes 
obtained in this study meet the nose-down control requirements at aft c.g. for 
the required nose-down control angular acceleration at stall recovery. 

For this study the horizontal tall was sized in accordance with the 
following requirements: 

• Total c.g. range of 57.6 inches 

• Takeoff control -to -stall at forward c.g. with maximum takeoff flaps at 
1-g stall speed 

• Nose-down angular acceleration of -0.09 rad/sec for stall recovery 

The horizontal tail was assumed to be an all-moving surface with 30 per- 
cent chord geared elevator yielding a usable C. of -0.9 at a -14 degree 
stabilizer deflection. It is possible that a further reduction in tall size 
can also be achieved by assuming a higher tall lift curve slope. This would 
entail an expanded study including different tail planforms. Such an analysis 
is beyond the scope of this study. 

Downwash data at the tail in reference 25 were modified slightly for tail 
arm length differences. 

Figure 148 is a tail sizing notch chart which compares the tail size 
requirements for the baseline and IDEA configuration. In both configurations 
the forward limit of c.g. travel is constrained by control to stall at landing 
configuration. For the baseline configuration the aft limit of c.g. travel is 
limited by the requirement for a six percent static margin from the neutral 
point locus. 

For the IDEA configuration the PACS allows the aft c.g. limit to have a 
negative static margin. A system has been developed at Lockheed for a -10 
percent static margin and has been demonstrated in piloted simulation at NASA 
Langley (ref. 26). This value was therefore selected for the IDEA 
configuration, although a more negative margin may be feasible. 

Note that the notch chart is premised on the c.g. range as a fraction of 
MAC before resizing. The c.g. range for the resized wing, as a fraction of 
MAC, would increase by 2.7 percent because of a corresponding decrease in MAC. 
This would require a slightly larger tall volume coefficient. Within the time 
constraints of this study this iteration could not be performed but the 
resultant error is small. 

An additional constraint to the aft c.g. is the ability to maintain tail 
uplift. Reoptimization of the horizontal tall geometry would move this 
constraint line to the right permitting a slightly smaller tail volume. 
However, an additional constraint on tail volume, not defined in this study, 
is that a significant portion of the trapezoidal tall area is contained within 
the aircraft fuselage. This limits the effectiveness of the horizontal tall. 
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Figure 148. - Horizontal tail sizing. 


An additional performance improvement is obtained using c.g. management. 

A saddle tank is located above the S-duct of the center engine with a capacity 
of 10,500 pounds of fuel. In addition, the vertical stabilizer is designed as 
a wet tank with capacity for an additional 10,500 pounds (figure 149). During 
climb and cruise, fuel may be transferred into the trim tanks to move the 
aircraft c.g. to its aft limit. Figure 150 shows that for a limited area of 
the c.g. envelope, the trim tank capacity is insufficient to move the c.g. to 
44 percent MAC. These combinations of weight and c.g. would occur very 
infrequently, so that a c.g. for performance calculations of 44 percent can be 
assumed • 

A similar system to the above is planned for the Airbus Industrie A310-300 
in which 11,000 pounds of fuel may be transferred to tanks in the horizontal 
tail to move the c.g. to the aft limit (ref. 27). 

12.3.2 Impac t on aircraft we ight . - The trim tank and its associated pumps, 
controls, and fuel piping is estimated to weigh 1168 pounds. This represents 
about one-half percent of 0EW. This is more than offset by a reduction in 
horizontal tail weight of 1630 pounds before resizing the aircraft, resulting 
from a reduction in tail area. 

12.3.3 Impac t on aircraft drag. - Horizontal tail wetted area is reduced from 
720 ft^ in the baseline aircraft to 374 £t Z on the IDEA configuration. This 
produces a reduction in skin friction drag which is 2.1 percent of total 
aircraft drag. 
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AfC movement of the c.g. produces a reduction in tail download, and hence 
V a decrease in wing lift and induced drag. Relaxation of the static stability 

margin results in a 3 percent MAC shift aftward in the c.g. range. This 
produces 0.4 percent increase in L/D at a of 0.5 (figure 151). The greater 
, benefit occurs as a result of c.g. management, in that the c.g. for perfor- 

mance calculations is shifted from 32 percent to 44 percent MAC, producing an 
, additional 1.5 percent improvement in L/D. 


12.4 Reduction in Maintenance Costs 

In the NASA/Lockheed study of ref. 2, reductions in maintenance costs were 
estimated for the IDEA concepts. These are shown in table 31 to reduce 
.'verall maintenance by 7.0 percent at the average stage length. Maintenance 
represents 19 percent of DOC so that these maintenance cost savings represent 
1.3 percent reduction in DOC. 


12.5 Reduction in Direct Operating Cost 

Differences in weights between the baseline and IDEA configurations are 
shown in figure 152. Maximum takeoff gross weight is reduced 7.5 percent for 
the IDEA configuration and OEW is reduced 8 percent. 

The first costs of the digital flight control and all-electric systems are 
not significantly different from the current technology systems which they 
replace, so that the cost/ lb OEW is approximately the same for both baseline 
and IDEA aircraft. 

Differences in DOC between the baseline and IDEA concepts are shown in 
figure 153. Fuel and oil represents 45 percent of DOC so that the 11.3 per- 
cent reduction in block predicted by the ASSET program contributes 5.1 percent 
reduction in DOC. The depreciation term in DOC is proportional to purchase 
price. As mentioned above, the cost/pound OEW is approximately the same for 
both configurations, and since depreciation represents 21 percent of DOC, the 
8 percent reduction in OEW produces 1.7 percent reduction in DOC. The 
remaining contribution to the reduction in DOC is 1.3 percent reduction in 
maintenance costs. The net effect is to reduce the DOC of the IDEA 
configuration by 7.9 percent as compared with the baseline. 


12.6 Differences in Aircraft Geometry 

The major external differences in aircraft geometry are illustrated in 
figure 154 and described as follows: 

12.6.1 Reduc tion in wi ng area . The wing loading is held constant at 
131 lb/ft . This value approximates the nominal constraint for maintaining a 
cons’ ant value of fuel volume available to volume required of 1.1 (In 
practice, this value varied slight 1 y from 1.09 for the baseline configuration 
to 1.08 for the IDEA configuration. Wing area is therefore reduced propor- 
tionally to TOGW). 
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Figure 151. - IDEA trim drag reduction. 


TABLE 31. - REDUCTION IN MAINTENANCE AS PERCENTAGE OF BASELINE 



Labor 

Material 

Reduction 

in 

Total 

Maintenance 


Per 

Cycle 

Per 

Hour 

Per 

Cycle 

Per 

Hour 

All -Electric 

Secondary 

Power 

-3.6% 

-1.2% 

-0.2% 

-0.4% 

-1.2% 

Digital 

Flight 

Controls 

-6.2% 

-8.6% 

-1.2% 

-3.6% 

-5.7% 

Totals 

-10.3% 

-10.0% 

-1.4% 

-4.0% 

-7.0% 


v 

I 
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12.6.2 Relocation of the wing . - As described in Section 12.3, the c.g. range 
of the aircraft is moved aft by 3 percent on the MAC, or 0.S6 foot. Wing, 
fuel, v.agine, and landing gear weights represent 46 percent of TOGW so that 
the fuselage must move aft by 1.1 feet relative to the wing in order to move 
the c.g. range by 0.56 foot. 

Rearward shift of the c.g. range requires that the location of the main 
landing gear be moved aft along its buttline chord. For an aft c.g. on the 
MAC of 44 percent, the landing gear post must be installed at 75 percent of 
the MLG buttline chord. This value is very close to the value of 74 percent 
established in ref. 4 as the limit for a landing gear design of the L-1011 
type using a vertical landing gear post; no penalty in landing gear weight was 
taken. 


12.6.3 Horizontal tall site reduct 'on . - The reduction in horizontal tail 
volume coefficient from 1.08 to 0.62 results in a corresponding reduction in 
tail trapezoidal area. 
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13. IMPACT OF ALTERNATE IDEA TECHNOLOGIES 

The Alternate IDEA technologies evaluated in this chapter are primarily 
those associated with the adoption of an advanced flight control manager, 
which would permit a reduction in the design load factor, as discussed in 
Chapter 10. In addition, some additional system weight reductions were made. 
These systems are: 

• Landing Gear 

• ECS 

• EMAS 

• Power Generation 


13.1 Reduction in Design Load Factor 

Figure 135 shows the effect of a reduction in wing load factor on block 
fuel when the IDEA configuration is designed for a range of 4600 n.mi* and 
flown at the average stage length 2500 n.mi. At an aspect ratio of 12, a 
block fuel reduction of 3 percent is obtained for a 2 g wing design and 6.1 
percent for a 1.5 g wing design. 

For a given design load factor, increasing aspect ratio to reduce block 
fuel results in a heavier wing and more expensive aircraft. The aspect ratio 
for minimum DOC therefore is lower than for minimum block fuel. These are 
plotted in figure 156 for a fuel price of $1. 50/gal. The aspect ratio of the 
baseline configuration was optimized at a fuel price of $2. 12/gal, which was 
the price assumed at the start of the study. At the request of NASA the price 
was reduced to $1. 50/gal in order to be consistent with the Boeing Company, 
the other contractor in this study. At a fuel price of $2. 12/gal the uncon- 
strained optimum aspect ratio is 13, but the design constraint of installing 
the landing gear constrains aspect ratio to 12. For evaluation of IDEA 
concepts, nonoptimum aspect ratio does not affect results. It is only when 
considering aspect ratio changes that the choice of baseline aspect ratio 
becomes significant. 

The curves of figures 155 and 156 do not include the penalties associated 
with installing landing gear in high aspect ratio wings. As aspect ratio 
increases the MAC moves aft relative to the buttline chord of the MLG. Above 
an aspect ratio of about 12, weight penalties become significant that are 
associated with installing the landing gear in the wing while providing a 
sufficient tip-up margin at the aft c.g. limit. 

For the 2 g wing design wing weight is reduced by 13 percent and for the 
1.5 g design a 28 percent reduction in wing weight could be achieved. 


13.2 Reduction in Landing Sink Rate 

Consistent with the methods of aircraft control described in Chapter 10, 
it is anticipated that the advanced flight control systems features on the 
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Figure 156. - Effect of design load factor on direct operating cost. 
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Alternate IDEA configurations will permit a reduced landing sink rate. Al- 
though no supporting analysis has been performed, the assumption has been made 
that the design sink rate may be reduced from 10 ft/sec to 5 ft/sec. It is 
estimated that landing gear weight could be reduced by 5.1 percent, or 999 
pounds before the aircraft is resized for the mission. Some additional weight 
reduction would be achieved from wing structural components that are sized by 
landing loads. 


13.3 Additional Reductions in Subsystems Weights 

Further improvements to the subsystems in the IDEA configuration that 
would be available for the Alternate IDEA configuration are described more 
fully in Chapter 11. These weight reductions, along with the reductions in 
wing and landing gear weight, are listed in table 32. 


13.4 Reduction in DOC 

The combined effects of the Alternate IDEA concepts produce a total 
reduction in block fuel of 3.4 percent when the aircraft is resized. This 
reduction is achieved only as a result of airframe and systems weight 
reductions; there are no differences in L/D or SFC between the IDEA or 
Alternate IDEA concepts. 


14. CONCLUSIONS AND RECOMMENDATIONS 


14.1 IDEA Benefits 

14.1.1 Block fuel reduction . - The impact of IDEA concepts on block fuel Is 
summarized in figure 157. When the SFC, weight, and drag reductions asso- 
ciated with the implementation of IDEA concepts are applied to the 350 
passenger Baseline Aircraft, the ASSET performance prediction program shows an 
11.3 percent reduction in block fuel when the aircraft is sized for the design 
range of 4600 n.mi. and flown at the average stage length of 2500 n.mi. 
One-half of this benefit is attributed to all-electric secondary power through 
bleed elimination and systems weight reduction. The other half of the block 
fuel reduction results from the implementation of the advanced digital 
fly-by-wire flight control system which results in additional weight savings 
and permits a flight-critical pitch active control system. 

14.1.2 DOC reduction . - IDEA concepts produce an eight percent reduction in 
DOC, figure 158. This reduction is achieved as a result of the reduction in 
block fuel and the associated downsizing of the aircraft, together with a 
small contribution to reduction in DOC from improvements in maintenance costs. 
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TABLE 32. - ALTERNATE IDEA ! /EIGHT SAVINGS 



Weight * 
Saving (lb) 

2g Design Load Factor 

6590 

5 FPS Landing Gear 

999 

ECS Weight Reduction 

2991 

Advanced EMAS 

72 

Advanced Power Generation 

98 

Total Weight Saving 

8,050 



Block Fuel Reduction 

3.4Z 

DOC Reduction 

3. IX 

1 


♦Before Resizing for Mission 


14.2 Alternate IDEA Benefits 

14.2.1 Block fuel reduction . - The alternate IDEA concepts permit changes in 
aircraft design philosophy, of which the most significant is the possibility 
of reducing the maximum limit maneuver load factor from 2.5 to 2.0. 

Additional design changes to the Alternate IDEA include reduction of landing 
sink rate, use of air cycle ECS, and improvements in EMAS and power generation 
systems. These produce 3.4 percent reduction in block fuel referenced to the 
IDEA configuration, of which 3.0 percent is attributed to the 2.0 g design 
load factor. 

14.2.2 DOC reduction .- The reduction in DOC from the Alternate IDEA concepts 
is 3.1 percent. This results from the effect of downsizing the aircraft and 
block fuel reductions. 


I 
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Figure 157. - Addition of technologies - impact on block fuel. 
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Figure 158. - Addition of technologies. Impact on direct opeating cost 






14.3 Summary of Critical Technologies 

Technologies that are critical to the achievement of technology readiness 
of the IDEA concepts are highlighted in figure 159. 

14.3.1 Power generation/ motor technology . - For the most part this technology 
is close to technology readiness, but some areas could benefit from government 
research, in particular: 

• Improved Magnetic Material . - Samarium-cobalt permanent magnet 
materials offer significant benefits in electric machine weight and 
power density. However, cobalt based permanent magnet materials are 
extremely expensive and the supply of cobalt from foreign sources is 
subject to interruption in case of hostilities. Neodynium-iron offers 
the potential for much lower cost high energy product permanent magnet 
material (30 million gauss-oesteds) , but is presently unsuitable for 
aerospace machines because of its operating temperature limitation. 
Although research into commercial applications of this material is 
being performed in Japan and the U.S., no concentrated effort is 
underway in this country to upgrade the temperature characteristics of 
iron based permanent magnet materials. The aerospace market alone may 
be too small to attract technology investment by industry. 

• Higher Temperature Insulation . - As the power density of motors and 
generators Increases, problems relative to higher operating temperature 
and heat dissipation become more acute. At present 20,000 hour life 
electrical insulation suitable for motor/generator applications are 
satisfactory up to 220°C (428°F) but materials rated up to 300°C 
(572°F) will be required. 

• Higher Temperature Electronics . - A similar problem exists with elec- 
tronics required for motor controllers. Currently rated for junction 
temperatures around 110°C (230"F), design ratings up to 150°C (302°F) 
will offer the option of higher temperature operating environments, 
and/or increased reliability. 

• Innovative Cooling Mechanisms . - New methods may have to be found for 
cooling high power density generators/motors, such as phase change 
convective cooling e.g. , heat pipes. 

14.3.2 Engine starting . - The same problems of heat sensitivity exist with 
the power electronics. 

14.3.3 Electric ECS . - The technology for an electrically driven air-cycle 
and vapor-cycle ECS is near readiness. Industry should develop these systems. 

14.3.4 Power distribution . - The reliability of the power distribution system 
is critical to the safety of flight and demonstration of this reliability will 
require government participation. 
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STATUS AftiD 

REQUIREMENTS 

TECHNOLOGY 

ELEMENTS 

A: NEAR TECHNOLOGY READINESS 
B: INDUSTRY SHOULD DEVELOP 
C: GOVERNMENT GUIDANCE DESIRABLE 
D: GOVERNMENT RESEARCH BENEFICIAL 


A 

B 

c 

D 

POWER GENERATION/MOTOR TECHNOLOGY 

X 




• IMPROVED MAGNETIC MATERIALS 




X 

• HIGHER TEMPERATURE INSULATION 




X 

• HIGHER TEMPERATURE ELECTRONICS 




X 

• INNOVATIVE COOLING MECHANISMS 




X 

ENGINE STARTING 





• POWER ELECTRONICS 

X 



X 

ELECTRIC ECS j 

X 

X 



POWER DISTRIBUTION 





• ELECTRIC LOAD MANAGEMENT 


X 

X 


• DISCRIMINATORY FAULT SENSING 




X 

• HIGH SPEED FAULT CLEARING/ 





SYSTEM RECONFIGURATION 




X 

• FAULT SURVIVABILITY 




X 

POWER'S Y -WIRE 





• ELECTRIC SYSTEM CONTROL 





AND PROTECTION 


X 



• THERMAL MANAGEMENT 




X 

HIGH FREQUENCY POWER SYSTEMS 





• POWER TRANSMISSION 





- POWER LOSSES 




X 

- CONNECTORS 




X 

- RF INTERFERENCE 




X 

VARIABLE VOLTAGE/VARIABLE FREQUENCY 





• COMPONENT DEVELOPMENT 




X 

SOLID STATE ELECTRONIC LOGIC 


X 

X 


SOLID STATE POWER CONTROLLERS 



X 


• ADEQUATE CAPACITY 




X 

• IMPROVED COOLING MECHANISMS 




X 

EMP PROTECTION (MILITARY 





APPLICATIONS) 




X 

LIGHTNING PROTECTION 




X 


Figure 159. - Summary of recommendations. 
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• Electric Load Management , - Although this technology should be 
developed by industry, government guidance may be desirable. 

• Discriminatory Fault Sensing . - Present fault sensing techniques pro- 
vide discrimination for line-to-line, line -to -neutral, and differential 
current, but basically rely on overcurrent or phase sequence current 
reactions. As a result, branch circuit faults needlessly cause the 
disconnection of large portions of the electric system. A technology 
is needed which will enable the aircraft system to be protected by 
disconnecting only the faulted branch circuit or individual load. 

• High-Speed Fault Clearing/System Reconfiguration . - At present, sensing 
and clearing a fault requires 20-30 ms or greater, although it is 
theoretically possible to clear faults in one-half of a cycle (1.25 ms 
at 400 Hz). 

• Fault Survivability . - At present a single fault in a paralleled gen- 
erator system can cause the momentary complete loss of electric power 
in the aircraft and, in a number of documented cases, caused the per- 
manent loss of electric power and subsequent loss of the aircraft. 

It is theoretically possible through a combination of system control 
and protection techniques to obtain the benefit of paralleled generator 
systems without the risk of single or multiple fault threat to flight 
safety. 

14.3.5 High frequency power systems . - The 20 kHz system developed by 
NASA-Lewis is novel but untested. The major concern with this system is in 
power transmission, specifically. 

- Power losses 

- Connectors 

- Radio frequency interference 

14.3.6 Variable voltage/ variable frequency . - The variable voltage/ variable 
frequency power system as proposed for the IDEA configuration does not 
represent a high technical risk. Nevertheless, it is unlikely that a 
commitment could be made from component manufacturers without a clear signal 
from the government that the VV/VF system is the preferred choice. 

14.3.7 Power-by wire . 

• Electric System Control and Protection 

e Thermal Management . - Heat dissipation in a composite structure raises 
special problems. The solution is outside the control of the actuator 
manufacturer and may be considered outside the area of responsibility 
of the composite material supplier. Possible solutions are the 
development of thermally conductive composites, forced air cooling, 
liquid loop cooling, or some other conductive means such as heat pipes 
on which the actuator is mounted. 





\ x V, V 
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14.3.8 Advanced Digital Plight Control System . - The mesh network selected 
for the PCS lacks sufficient maturity to develop the complex bus management 
software, develop specific designs, and develop design assurance methods for 
system validation and certification. On the other hand, the development of 
mesh network technology is accelerating because of ongoing work which involves 
prototype systems for testing. 
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APPENDIX A 


SELECTED OUTPUT FROM 
AIRCRAFT PERFORMANCE 
AND SIZING PROGRAM 
(ASSET) 


ATX-350I , DESIGN RANGE = 4400 NMX » M = 0.60, INTERN. RESPVS 
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AVG ROI OVER THE 16 YEAR PERIOD - 3.56 PERCENT 
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AVG ROI OVER THE 16 YEAR PERIOD = 5.80 PERCENT 
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AVG ROI OVER THE 16 V FAR PER 100 = 10.00 PERCENT 
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SYSTEM RELIABILITY ASSESSMENT 
SELECTED ELECTRIC POWER GENERATION AND 
DISTRIBUTION SYSTEM 
INTEGRATED DIGITAL ELECTRIC AIRCRAFT 

By 
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Introduction 

The purpose of this analysis is to ascertain if the selected Inte- 
grated Digital Electric Aircraft (IDEA) power generation system and dis- 
tribution system is certifiable under the FA A guidelines. The certifi- 

ability criterion is that the probability of losing flight critical power 

_q 

shall be less than 10 on •« per flight hour basis. 

The selected power generation system is a partial converted variable 
voltage and variable frequency system (VWF) and the selected power dis- 
tribution is a ring main arrangement, see Figure 1. This combined ar- 
rangement enables the power for the flight control actuators to be tapped 
off directly from the ring/bus, see Figure 1. The power for flight con- 
trol computers are tapped off the constant voltage constant frequency 
(C^CF) buses which are rectified and inverted from the VWF buses, see 
Figure 2. Thus power off the left and right ring, WVF buses and the CVCF 
buses are considered flight critical electric power. 

Thus, this analysis will assess: 

(1 ) The probability of losing power to each of the VWF buses. 

(2) The probability of losing power to left outer ring, left inner 
ring, right outer ring and right inner ring. 

(3) The probability of losing power to flight control computer (FCS) 
1,2,3 and 4* 

( 4 ) The probability of losing all electric power. 

Result 

The intent of the FAA guidelines has been satisfied. All the events 
which have been assessed fall into the extremely improbable category. The 
probability of the occurrence of the events on a per flight hour basis are 
as follows. 
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Figure 1 . IDEA Selected Electric Power Generation and Distribution System 

















The probability of losing power to a WVF Bus 



VVVF Bus 1 = 5.50 x 10- 15 

WVF Bus 2 = 2.04 x 10 -15 

VWF Bus 3 = 2.04 x 10" 5 

VVVF Bus 4 * 3.50 x 10” 15 

The probability of losing power to 

Left Outer Ring = I.36 x 10 ^ 

-15 

Left Inner Ring * 2*60 x 10 

1 5 

Right Outer Ring = 1*36 x 10- 

-15 

Right Inner Ring - 2.60 x 10 

The probability of losing power to flight control computer 
Computer 1 55 1 * 36 x 10 

-9 

Computer 2 = 1*36 x 10 

-9 

Computer 3 * 1 -36 x 10 

-9 

Computer 4 - 1*36 x 10 

-1 5 

The probability of losing all electric power is 1.05 x 10 
Discussion and Analysis 

The final configuration for the power generation system and distri- 
bution system is shown in Figure 1 and Figure 2. 

The system is symmetrical; the result of the analysis done on the 
left 3ide is also applicable to the right side. Thus, only the left hand 
rings and VV/VF Bus 1 and Bu3 2 will be analyzed. 



The assumptions required for this analysis are: 


1 ) All failures are primary failures 

2) The digital power/load management system is perfect 

3) No generator is switched on to a bus or ring parallel with an- 
other generator 

4) Any single generator is sufficient to meet the aircraft load 
demand 

5) The systems are operative before take-off. 

6) All failures are exponentially distributed. 

7) Contacts EP1 and EP2 are for external power connection only. 

The technique used for this assessment is fault tre^ analysis. The 
system configuration is translated into a logic tree. Each undesirable 
event, such as no power to VVVF Bus, no power to FCS 1 or no power to 
power ring, is treated as the top event for the logic tree. 

There are three outputs associated with each logic tree analysis, (l) 
the logic structure, (2) the failure probability time history, and (3) the 
cut sets. 

The logic structure documents the configuration of the system under 
evaluation. 

The failure probability time history provides a quantitative measure 
which could be viewed as figure of merit or as a relative comparison 
between alternate configurations. 

The cut sets are failure paths of the system's logic structure. A 
cut set is a collection of basic events (component failures) whose pres- 
ence will cause the top event to occur. The cut sets serve as a qualita- 
tive measure. One could interpret that cut sets with one element are 
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'single point failures" of the system, out set with two elements are 
"double point failures", etc. Only the first twenty-five top ranked cut 
sets are shown for each logic tree in this analysis. 

VVVF Bus 1 

The associated outputs are Table 1 , Figure 3 and Table 2. The prob- 
ability of losing power to VWF Bus 1 is 3*5 x 10”^, on a per flight hour 
basis. This result is also applicable to WVF Bus 4. 

VVVF Bus 2 

The associated outputs are Table 3, Figure 4 and Table 4. The prob- 

-15 

ability of losing power to VWF Bus 2 is 2.04 x 10 , on a per flight 

hour basis. This result is also applicable to VWF Bus 3* 

Left Outer Ring 

The associated outputs are Table 5, Figure 5 and Table 6. The prob- 

- 1 5 

ability of losing power to the left outer ring is 1.36 x 10 , on a per 

flight hour basis. This result is also applicable to right outer ring. 

Left Inner Ring 

The associated outputs are Table 7, Figure 6 and Table 8. The prob- 

- 1 5 

ability of losing power to the inner ring is 2.60 x 10 on a per flight 

hour basis. This result is also applicable to right inner ring. 

No Power to FCS 1 

The associated outputs are Table 9, Figure 7 and Table 10. The prob- 

_Q 

ability of losing power to FCS 1 is 1.36 x 10 , on a per flight hour 
basis. This result is also applicable to FCS 4. 

No Power to FCS 2 

The associated outputs are Table 11, Figure 8 and Table 12. The 

-9 

probability of losing power to FCS 2 is 1.3 h x 10 on a per flight hour 
basis. This result is also applicable to FCS 3* 

370 






♦y (i 


No single point failure which could cause the occurrence of the top 
event was found in the previous analysis. 

The cut set, all engines out and the AFU is not functioning, will 

cause the event, loss of all electric power to occur. The probability of 

- 1 5 

occurrence of this event is 1.05 x 10 , on a per flight hour basis. 

The emergency power system (EPS) as the power source for the all en- 
gines and APU out condition was not included in the assessment. The FAA 
guideline is met without EPS. It would be a plus if the EPS is included 
as a power source. 

Failure rates used in this assessment are either point estimates 
derived from the LI Oil experience or quoted by the manufacturer. The 
reference for these failure rates are shown in Table 1J. 
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Table 1. Logic Structure, WVP Bus 1 


*»#*»#» CUTSETS OBTAINED BY HOCUS - IOEA-VVVF, BUS 1 4/23 /B4 ******* 
«»«***»«*«*«»»«*«*«««»«*»»<(»*«*««« »««*««««**»««««*#««»«»«*«•««*««*«» 
99 ELEMENTS USEO TO DESCRIBE THIS TREE - 39 GATES ARE DEFINED 


GATE 

TYPE 

t GATES 

« COMP. 

INPUTS 


TI 

OP 

1 

1 

IHV1 

1 


1 

and 

3 

0 

A1 

A2 

A3 

A1 

OR 

0 

3 

GC3A 

GEN 3 

EHG2 

A2 

OR 

1 

1 

BT8 

A4 


A3 

OR 

0 

3 

GC7 

APU 

APUC 

A4 

AHO 

3 

0 

A5 

A6 

Ad 

AS 

OR 

1 

1 

GC12 

HI 


A6 

OR 

0 

3 

GC1 

GEN1 

EHG1 

A8 

OR 

1 

1 

BT1 

All 


All 

AMO 

3 

0 

Nil 

A12 

A13 

Nil 

OR 

1 

1 

BT7 

N12 


N12 

Arm 

2 

0 

HI 3 

N14 


N13 

OR 

0 

3 

GC4A 

ENGS 

GEN4 

Ml 4 

OR 

0 

3 

gcq 

AFUC 

APU 

A12 

OR 

1 

1 

GT56 

A14 


A13 

OR 

0 

3 

GC5 

ENGS 

GENS 

A14 

AHO 

2 

0 

A16 

A17 


A16 

OR 

1 

1 

BT3 

A21 


A17 

OR 

0 

3 

GC6 

EHS3 

GEM6 

HI 

AND 

2 

0 

A9 

A7 


A9 

OR 

0 

3 

GC2 

ENG1 

GEN2 

A7 

OR 

1 

1 

BT2 

M2 


H2 

AHO 

2 

0 

A10 

NS 


A10 

OR 

0 

3 

C3A 

GEMS 

ENG2 

N3 

AND 

2 

0 

m 

NS 


m 

OR 

1 

1 

BT3 

N6 


H5 

OR 

0 

3 

GC*> 

EHG2 

GEN4 

m 

AHO 

2 

0 

N7 

MS 


H7 

OR 

0 

3 

GC6 

ENG 3 

GEN6 

M8 

OR 

1 

1 

GTS6 

N9 


N9 

AND 

2 

0 

mo 

HU 


HI 9 

OR 

0 

3 

GC5 

ENG 3 

GENS 

Nil 

OR 

1 

1 

BT7 

N12 


N12 

AHO 

2 

0 

HI 3 

N14 


HI 3 

OR 

0 

3 

GC4A 

ENGS 

GEH4 

N14 

OR 

0 

3 

GC6 

APUC 

APU 

A21 

OR 

2 

0 

HIS 

H16 


ms 

OR 

0 

3 

GC4 

GEM4 

ENG2 

N16 

OR 

0 

4 

BT4 

GC3 

ENG2 GENS 


© 
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LOGIC TREE GRAPHICS STSTEM 
LOCKHEED CALIFORNIA COMPANY 
IDEA-VVVF, BUS 1 



\ 


* ' 




TIME IN HOURS 

0.0 

9 . 99999931 E-04 
1 .9999998SE-03 
4 . 99999896E-03 
9 . 9999979 1 E-03 
1 .99999996E-02 
4. 99999970E-02 
9.99999642E-02 
1 . 99999988E-G 1 
5 . OOOOOOOOE-O 1 
I . OOOOOOOOE 00 


FAIL PROB. 

0.0 

0.0 

0.0 

0.0 

0.0 

0.0 

2 . 7755575SE- 1 7 
3. 19189120E-16 
2 . 73392420E- 1 5 
4 . 36595204E- 1 4 
3 . 50372509E- 1 3 


SUCCESS PROB. 

1. OOOOOOOOE 00 
1. OOOOOOOOE 00 
1. OOOOOOOOE 00 
1. OOOOOOOOE 00 
1. OOOOOOOOE 00 
1. OOOOOOOOE 00 
9. 9999S940E-01 
9. 99999940E-01 
9. 99999940E-0 1 
9. 99999940E-01 
9. 99999940E-0 1 


t 


Figure 3. Failure Probability - Time History WVF Bus 1 
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Table 2. Cut Set, WVF Bus 1 




IOEA-VWF , BUS 1 A/23/B4 APRIL 24, 19fl<* 

MINIMAL CUT SET DATA IN DESCENDING ORDER OF PROBABILITY 


NO. CUT SET NO. MAX FAILURE PROB. COMPONENTS CONTAINED IN SET 


1 

9 

. 19160928E-12 

ENG2 

BT6 

APU 



2 

6 

. 12O90991E-12 

GEN3 

8T6 

APU 



3 

1 

f 

.99258699E-13 

ENG2 

BT8 

APUC 



9 

2 

. 37790929E-13 

GEN3 

BT6 

APUC 



5 

a 

.29727858E-19 

GC3A 

BT6 

APU 



6 

10 

. 10590982E-19 

ENG2 

APU 

ENG1 

ENG3 


7 

3 

• 77267310E-15 

GC3A 

BT6 

APUC 



a 

5 

.669630052*15 

ENG2 

BT6 

GC7 



9 

7 

,5719371^*15 

GENS 

BT6 

GC7 



10 

11 

•32996003E-15 

ENG 2 

APUC 

CNG1 

ENG 3 


11 

9 

.11697000E-16 

GC3A 

BT6 

GC7 



12 

73 

. 99899981E-19 

GEN3 

APU 

£HG1 

GEN9 

ENGS 

13 

55 

. 99899981E-19 

ENG2 

APU 

GEN2 

GENl 

ENG3 

19 

69 

. 31223751E-19 

ENG2 

APUC 

GEN2 

GEN1 

ENGS 

IS 

60 

. 31223751E-19 

GENS 

APUC 

ENG1 

GEM9 

ENGS 

16 

76 

. 20931006E-20 

GEN3 

APU 

ENGX 


C'lZ 

17 

65 

. 2C9310C6E-20 

imz 

APU 

GC2 


ENGS 

16 

sa 

. 20931006E-20 

ENG 2 

APU 

GEN2 


F 

19 

56 

. 20931006E-20 

GENS 

APU 

ENG1 

ENG** 


20 

59 

. 20931006E-20 

ENG2 

APU 

GC12 

GE 


21 

50 

.20931006E-20 

GENS 

APU 

GC12 

ENG* 

ENG3 

22 

75 

. 17995102E-20 

GEN3 

APU 

GC12 

GENl 

FNG3 

23 

79 

.63857935E-21 

ENG2 

APUC 

GEN2 

GC1 

ENGS 

29 

72 

.63857935E-21 

ENG2 

APUC 

GC12 

GENl 

ENGS 

25 

71 

. 63657935E-21 

GEN3 

APUC 

ENG1 

ENGS 

BT2 
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Table 3 


Logic Structure, V”VF Bus 2 




CUTSETS OBTAINED BY HOCUS - IDEA-VVVF, BUS 2 »■««! 

97 ELEMENTS USEO TO DESCRIBE THIS TREE - 18 GATES AP* DEFINED 


. 

GATE 

TYPE 

• GATES 

• COMP. 

INPUTS 



2 

AMO 

3 

0 

Bl 

B2 

M3 


bl 

OR 

0 

* 

f * 3A 

GEM3 

EMG2 


B2 

OR 

1 

1 

Br. 

B4 



B4 

AMD 

?. 

0 

B5 

6 



B5 

OR 

0 

3 

GC2 

V^l 

GEN2 

fc 

B6 

OR 

1 

1 

GC1 

B7 


7 

M3 

AMD 

2 

0 

M4 

MS 



N4 

OR 

1 

1 

BT3 

f!6 



M5 

OR 

0 

3 

Gt •% 

EHS* 

GEN4 


M6 

AMO 

2 

0 

M7 

M* 



H7 

OR 

0 

3 

GC6 

*,•53 

6EM6 

* 

MS 

OR 

1 

1 

GT io 

*9 



M9 

AMD 

2 

0 

MU 

Mil 


* 

NIO 

OR 

0 

3 

GC5 

EMG3 

GEN5 


Mil 

OR 

1 

1 

BT7 

Ml 2 



M12 

AffO 

2 

0 

Ml 3 

M14 


' 

Ml 3 

OR 

0 

3 

GC4A 

ENG3 

GEM4 


Ml 4 

OP 

0 

T 

rrtk 
vrv W 

a rue 

APU 


B7 

AMO 

3 

0 

Bd 

B16 

A8 


Bd 

OR 

0 

3 

GCl 

EMG1 

GEM1 


B16 

OR 

1 

1 

BT8 

B12 



A8 

OR 

1 

1 

BT1 

All 


' 

All 

-i 10 

3 

0 

Mil 

A12 

A13 


Mil 

JR 

1 

1 

BT7 

N12 



M12 

Arro 

2 

0 

Ml 3 

MIA 



Ml 3 

OR 

0 

3 

GC4A 

EMG3 

GEN4 

‘ 

N14 

OR 

0 

3 

GC8 

A p UC 

APU 


A12 

CR 

1 

1 

GT56 

A14 



A13 

OR 

0 

3 

GC5 

EMG3 

GENS 

* 

A14 

Afro 

2 

0 

A16 

Ai* 7 



A16 

OR 

1 

1 

BT3 

A21 



;i7 

OR 

0 

3 

GC6 

CMG3 

GEN6 


,>21 

r p 

2 

0 

M15 

M16 



Ml 5 

CR 

0 

3 

GC4 

GEM4 

ENG2 


M16 

CR 

0 

4 

BT4 

GO 3 

EMG2 


B12 

Afro 

2 

0 

B21 

B22 



B21 

OR 

0 

5 

GC7 

APUC 

APU 

i 

BC2 

OR 

0 

3 

GC3A 

EMG2 

GEM3 
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co co m o o cr co r-D-n 


v 




TIME I N HOURS 

0.0 

9. 99999931E-04 
1 . 999999oSE-U3 
4. 999S939GE -03 
9. 9S993791E-03 
1 . 99999996E-02 
4. 9999S970E-02 
9. 99999642E- 2 
1 . 99999988E -0 1 
5. OOOOOOOOE-O 1 
1 . OOOOOOOOE 00 


FAIL PROD. 

0.0 

0.0 

0.0 

0.9 

0.0 

0.0 

0.0 

0.0 

0.0 

1 .526556RSE-16 
2 . 0400348 1 E- 1 5 


SUCCESS PROD. 

1. OOOOOOOOE 00 
1 . 0000000CE 00 
1 . COCOOOOOE 00 
1. OOOOOOOOE 00 
l.COOOOOOCE 00 
1 . OOOOOOOOE 00 
l.UOOGOOJOE 00 
1. OOOOOOOOE 00 
I. OOOOOOOOE 00 
9. 99999940E-01 
9. 99093940E-O1 


Figure 4. Failure Probability - Time History WVF Bus 2 
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Table 4* lut Set WVF Bus 2 


IDEA-VVVF, BUS 2 


APRIL 24» 1984 

MINIMAL CUT SET DATA IN DESCENDING ORDER OF PROBABILITY 


CUT SET NO. 


MAX FAILURE PROB. 


COMPONENTS CONTAINED IN SET 


1 

14 

„ 10540 982 E- 14 

ENG2 

CNG1 

EMG3 

APU 


2 

1 

.66983005E-15 

ENG2 

BT2 

BT3 



- 

17 

.32946003E-15 

ENG2 

ENG1 

ENG 3 

APUC 


4 

13 

. 18407336E-16 

ENG2 

BT2 

ENG3 

APU 


5 

15 

.57532455E-17 

ENG2 

BT2 

ENG 3 

APUC 


6 

7 3 

. 9'7899481E-19 

ENG2 

GEN2 

ENG 3 

GENi 

APU 

7 

64 

.99899481E-19 

GEN3 

ENG1 

GEN4 

ENGS 

AP'J 

6 

lo 

.87072165E-19 

ENG 2 

BT2 

EMG3 

GC8 


9 

8 

.87072185E-19 

ENG 2 

BT3 

ENG1 

GC1 


IP 

12 

.87072185E-19 

ENG2 

BT2 

ENG3 

BT7 


11 

10 

.87072165E-19 

EUG2 

BT2 

GT56 

ENG3 


12 

5 

. 74346942E-19 

ENG2 

BT2 

GT56 

GEN6 


13 

4 

. 74346942E-19 

ENG2 

BT3 

GEN2 

GC1 


14 

2 

.63481459E-19 

GEN3 

BT2 

GEN4 

BT3 


15 

97 

. 31223751E-19 

GEN3 

ENG1 

GEN4 

ENG3 

APUC 

16 

94 

. 31223751E-19 

ENG2 

GEN2 

ENG 3 

GENI 

APUC 

17 

95 

.20431006E-20 

ENG 2 

GC2 

ENG3 

GENI 

APU 

18 

76 

. 20431006E-20 

GC3A 

ENG1 

GEN4 

ENG3 

APU 

19 

75 

.20431006E-20 

GEN3 

ENG1 

GC4 

ENG3 

APU 

20 

72 

. 20431006E-20 

ENG2 

GEN2 

ENG 3 

GC1 

APU 

21 

67 

. 17445102E-20 

GEN3 

BT2 

GEN4 

ENG3 

APU 

22 

11 

. 15205108E-20 

ENG2 

BT2 

GT56 

GC6 


23 

9 

.15205108E-C0 

ENG 2 

BT3 

GC2 

GC1 


24 

3 

. 12982947E-20 

GC3A 

BT2 

GEN4 

BT3 


25 

6 

. 12982947E-20 

GEN3 

BT2 

GC4 

BT3 











Table 5» Logic Structure, Left Outer Ring 


«»»»* CUTSETS ODTAIMED BT HOCUS - IDEA-LEFT OUTER RING «**•*< 

»*«*»»»»»* tf ««**»* «**»»****«**«»*«»*««*»*»*»«« M***«*ff ««*««*' 

97 ELEMENTS USED TO DESCRIBE THIS TREE - 38 GATES APE DEFINED 


GATE 

TTPE 

t GATES 

ft COMP. 

INPUTS 


LOR 

AND 

4 

0 

Al 

A2 

A5 

AI 

OR 

0 

3 

GC1 

GEN1 

ENG1 

A 2 

OR 

1 

X 

BT8 

A<* 


A4 

AND 

2 

0 

A6 

N31 


AS 

OR 

1 

1 

GC12 

HI 


A6 

OR 

0 

3 

GC3A 

GEN3 

ENG2 

A8 

OR 

1 

1 

BT1 

All 


All 

Arm 

3 

0 

Nil 

A12 

A13 

Nil 

OR 

1 

1 

BT7 

N12 


Ml 2 

AND 

2 

0 

N13 

N14 


Ml 3 

OR 

0 

3 

GC4A 

ENG3 

GEN* 

N14 

OR 

0 

3 

GC8 

APUC 

APU 

A12 

OR 

1 

1 

GT56 

A14 


A13 

OR 

0 

3 

GC5 

ENG3 

GEN5 

A14 

AND 

2 

0 

A16 

A17 


A16 

OR 

1 

1 

BT3 

A21 


A17 

OR 

0 

3 

GC6 

ENG3 

GEN6 

Ml 

AND 

2 

0 

A9 

A7 


A9 

OR 

0 

3 

GC2 

ENG1 

GEN2 

A7 

OR 

1 

1 

BT2 

N2 


N2 

AND 

2 

0 

A10 

N3 


A10 

OR 

0 

3 

C3A 

GEN3 

ENG2 

N3 

Arm 

2 

0 

N4 

NS 


N<t 

OR 

1 

1 

BT3 

N6 


N5 

OR 

0 

3 

GC4 

EfJG2 

GEN* 

N6 

Arm 

2 

0 

N7 

Nd 


H7 

OR 

0 

3 

GC6 

ENG3 

GEN6 

N9 

OR 

1 

1 

GT56 

N9 


N? 

Arm 

2 

0 

N10 

Nil 


N10 

OR 

0 

3 

GC5 

ENG3 

GEN5 

Nil 

OR 

1 

1 

BT7 

Nr; 2 


N12 

AND 

2 

0 

Ml 3 

N14 


M13 

OR 

0 

3 

GC4A 

ENG3 

GEN* 

N14 

OR 

0 

3 

GC6 

APUC 

APU 

A21 

OR 

2 

0 

N15 

N16 


N15 

OR 

0 

3 

GC9 

GEN4 

ENG2 

N16 

OR 

0 

4 

BT4 

GC3 

EHG2 

N31 

OR 

0 

3 

6C7 

APU 

APUC 
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Figure 5» Failure Probability - Time History Left Outer Ring 
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Table 6. Cut Set Left Outer Ring 


IDEA-LEFT OUTER RING APRIL 25, 1984 

MINIMAL CUT SET DATA IN DESCENDING ORDER OF PROBABILITY 


HO. 

CUT SET NO. 

MAX FAILURE PROS. 



COMPONENTS CONTAINED IN SET 

X 

6 

. 10540982E-14 

ENG1 

ENG2 

ENG3 

APU 


2 

5 

. 32946003E-15 

ENG1 

ENG2 

ENG3 

APUC 


3 

69 

.99899481E-19 

GEN1 

ENG2 

GEN2 

APU 

ENG3 

4 

45 

. 99899481E-19 

EKG1 

GEN3 

ENG 3 

APU 

GEN4 

5 

76 

♦31223751E-19 

ENG1 

GEN3 

ENG3 

APUC 

GEN4 

6 

73 

.31223751E-19 

GEN1 

ENG 2 

GEN2 

APUC 

ENG3 

7 

72 

.20431006E-20 

GEN1 

ENG2 

GC12 

APU 

ENG3 

6 

71 

. 20431006E-20 

6EN1 

ENG2 

GC2 

APU 

ENS3 

9 

67 

.20431006E-20 

ENG1 

6EN3 

GC12 

APU 

ENS3 

10 

64 

. 20431006E-20 

ENG1 

GEN3 

ENG3 

APU 

BT2 

11 

58 

.20431006E-20 

GC1 

ENG2 

GEN2 

APU 

ENG3 

12 

57 

. 20431006E-20 

ENG1 

GEN3 

ENG3 

APU 

GC4 

13 

53 

•17445102E-20 

GEN1 

GEN3 

GC12 

APU 

ENG3 

14 

1 

. 15205108E-20 

ENG1 

BT8 

6C12 

BT1 


15 

4 

.152051085*20 

ENG1 

BT8 

BT1 

BT2 


16 

2 

.12982947E-20 

GEH1 

BT8 

GC12 

BT1 


17 

77 

.63857435E-21 

EHG1 

GEN3 

GC12 

APUC 

EN63 

18 

74 

.63857435E-21 

GEN1 

ENG2 

GC12 

APUC 

ENG3 

19 

63 

.63857435E-21 

ENG1 

GEN3 

ENG3 

'°UC 

BT2 

20 

62 

.63857435E-21 

ENG1 

GEN3 

ENG3 

APUC 

GC4 

21 

56 

.63857435E-21 

GCl 

ENG2 

GEN2 

APUC 

ENG3 

22 

52 

.63857435E-21 

GEN1 

ENG2 

GC2 

APUC 

ENG 3 

23 

70 

.54524935E-21 

GEN1 

GEN3 

GC12 

APUC 

ENG3 

24 

60 

.41784586E-22 

GCl 

enge 

GC2 

APU 

ENG3 

25 

54 

.41784586E-22 

GCl 

ENG2 

GCl 2 

APU 

ENG3 




380 



Table 7 


Logic Structure, Left Inner Ring 


CUTSETS OBTAINED BY HOCUS - IDEA-LEFT ItWER RIN« «»»«**« 
97 ELEMENTS USED TO DESCRIBE THIS TREE - 38 6ATES ARE DEFINED 


GATE 

TYPE 

* GATES 

II COMP. 

INPUTS 


UR 

AND 

3 

0 

A1 

A7 

Ll 

AX 

OR 

0 

3 

GC2 

GEN2 

ENG1 

A7 

OR 

1 

1 

BT2 

N2 


N2 

AND 

2 

0 

A10 

N3 


A10 

OR 

0 

3 

C3A 

GEM3 

EMG2 

M3 

AMO 

2 

0 

m 

M5 


m 

OR 

1 

1 

BT3 

N6 


N5 

OR 

0 

3 

GC4 

ENG2 

6EN4 

M6 

AND 

2 

0 

N7 

N8 


H7 

OR 

0 

3 

6C6 

ENG3 

GEN6 

H8 

OR 

1 

1 

GT56 

N9 


N9 

AMD 

2 

0 

M10 

Nil 


M10 

OR 

0 

3 

GC5 

EMG3 

GEN5 

Nil 

OR 

1 

1 

BT7 

N12 


N12 

AMO 

2 

0 

Ml 3 

N14 


N13 

OR 

0 

3 

GC4A 

ENGS 

GEN4 

N14 

OR 

0 

3 

GC8 

APUC 

APU 

ll 

OR 

1 

1 

GT12 

12 


12 

A) ID 

3 

0 

13 

14 

A8 

13 

OR 

1 

1 

BT8 

15 


L4 

OR 

0 

3 

GCi 

ENG1 

GEN1 

Ad 

OR 

1 

1 

BT1 

All 


All 

AMD 

3 

0 

Nil 

A12 

A13 

Nil 

OR 

1 

1 

BT7 

N12 


N12 

AMO 

2 

0 

N13 

N14 


N13 

OR 

0 

3 

GC4A 

EMG3 

GEM4 

Ml 4 

OR 

0 

3 

GC8 

APUC 

APU 

A12 

OR 

1 

1 

GT56 

A14 


A13 

OR 

0 

3 

6C5 

ENG3 

GEN5 

A14 

AMD 

2 

0 

A16 

A17 


A16 

OR 

1 

1 

BT3 

A21 


A17 

09 

0 

3 

GC6 

EMG3 

GEN6 

A21 

OR 

2 

0 

N15 

Ml 6 


Ml 5 

OR 

0 

3 

GC4 

GEN4 

ENG2 

M16 

OR 

0 

4 

BT4 

GC3 

ENG2 GENS 

15 

AM*) 

2 

0 

L6 

17 


L6 

OR 

0 

3 

GC3A 

GENS 

EMG2 

L7 

OR 

0 

3 

GC7 

APUC 

APU 


381 


V 




0 



co cn mood co r~^jD~n 


LOGIC TREE GRAPHICS SYSTEM 
LOCKHEED CALIFORNIA COMPANY 
IDEA-LEFT INNER RING 



*. 

v 





TIME IN HOURS 

0.0 

9 . 9999393 IE-04 
1.99999986E-03 
4.9999989GE-03 
9 . 9999979 IE -03 
1 .99999996E -02 
4 . 99999970E -02 
9 . 99999642E-02 
1 .99999988E-01 
5 . OOGOOOCGE-Q 1 
1 .OOOOOOOOE 00 


FAIL PROD. 

0.0 

0.0 

0.0 

0.0 

0.0 

0.0 

0.0 

0.0 

0.0 

2. 2204 l iS0SE- 1 S 
2.59514632E-1S 


SUCCESS PROB. 

1. OOOOOOOOE 00 
I. OOOOOOOOE 00 
1 . OOCOOOOCE 00 
1. OOOOOOOOE 00 
1. OOOOOOOOE 00 
1. OOOOOOOOE 00 
1. OOOOOOOOE 00 
1. OOOOOOOOE 00 
1. OOOOOOOOE 00 
9. 99999940E-01 
9. 99999940E-01 


Figure 6. Failure Probability - Time History Left Inner Ring 
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Table 8. Cut Set Left Inner Ring 




IDEA- LEFT INNER RING APRIL 25. 1984 

MINIMAL CUT SET DATA IN DESCENDING ORDER OF PROBABILITY 


NO. 

CUT SET NO. 

MAX FAILURE PROB. 



COMPONENTS CONTAINED IN SET 

1 

6 

•10540982E-14 

ENG1 

ENG3 

ENG2 

APU 


Z 

1 

.66983005E-15 

ENS1 

BT2 

GT12 



3 

2 

.57193719E-15 

GEN2 

BT2 

GT12 



4 

9 

• 32946O03E-15 

ENG1 

ENG3 

ENG2 

APUC 


5 

3 

. 11697006E-16 

GC2 

BT2 

GT12 



6 

55 

.99899481E-19 

GENE 

ENG3 

ENG2 

APU 

GEN1 

7 

9 

.87072185E-19 

ENG1 

GT12 

ENG2 

BT3 


8 

6 

. 74346942E-19 

GEN2 

GT12 

ENG2 

BT3 


9 

69 

-31223751E-19 

GEN2 

ENG 3 

ENG2 

APUC 

GEN1 

10 

68 

.20431006E*20 

ENG1 

BT2 

GEN3 

ENG3 

APU 

11 

62 

.209310065*20 

GEN2 

GT12 

ENG2 

ENG 3 

APU 

12 

90 

.209310065*20 

GC2 

ENG3 

ENG 2 

APU 

GENX 

15 

39 

•204310065*20 

GEN2 

ENG3 

ENG2 

APU 

GC1 

19 

7 

.15205108E-20 

GC2 

GT12 

ENG2 

BT3 


15 

5 

.15205108E-20 

ENG1 

BT2 

BT1 

BT8 


16 

70 

•63C57435E*21 

GEN2 

ENG3 

ENG2 

APUC 

SCI 

17 

65 

.63857435E-21 

GEN2 

GT12 

ENG2 

ENG3 

APUC 

16 

50 

.638574355*21 

ENG1 

BT2 

GEN3 

ENG3 

APUC 

19 

91 

.63857435E-21 

GC2 

ENG3 

ENG2 

APUC 

GEN1 

20 

16 

.41784586E-22 

ENG1 

BT2 

BT1 

APU 

ENG2 

21 

69 

.41784586E*22 

GC2 

GT12 

ENG2 

ENG3 

APU 

22 

59 

.41784586E-22 

GC2 

ENG3 

ENG2 

APU 

GC1 

23 

25 

.41784586E-22 

ENG1 

BT3 

ENG2 

APU 

BT1 

29 

32 

.35677945E-22 

ENG1 

BT2 

BT1 

APU 

GEN3 

25 

71 

•13059839E*22 

GC2 

ENG3 

ENG2 

APUC 

GC1 
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Table 9- Logic Structure, No Power to PCS 1 




ft tf tf«* tf«» * * Mtftf tftf ¥ ft«» tt « * * * Ktf Ktf tftftf tf ##*tftf#Ktf * tf# NMNK tftftf K # # tf # * tf tf # tftftf tf tftftf tftf 

tftftftftftftf CUTSETS OBTAINED BT HOCUS - NO POWER TO FCSI 4/23/84 ******* 

tftf MM tf tf tftf tftf tftftf tf If If * ¥ tftf# * tf ******* tf tf* tf * MM tf tftftf tftftf tftf Ktf tf tftftf tftftftftftftf If tftftf tf tf# ## 

101 ELEMENTS USEO TO OESCRIBE THIS TREE - 40 GATES ARE DEFINED 


GATE 

TYPE 

i GATES 

# COMP, 

INPUTS 


TOP 

OR 

2 

0 

2 

1 


2 

AND 

0 

2 

INV2 

INV1 


I 

AND 

3 

0 

A3 

A2 

A1 

A3 

OR 

0 

3 

GC7 

APU 

APUC 

A2 

OR 

1 

1 

BT8 

A4 


A4 

AND 

3 

0 

A5 

A6 

A8 

A5 

OR 

1 

1 

GC12 

N1 


A6 

OR 

0 

3 

GC1 

GEN1 

ENG1 

A6 

OR 

1 

1 

BT1 

All 


All 

AND 

3 

0 

Nil 

A12 

A13 

Nil 

OR 

1 

1 

BT7 

N12 


Ml 2 

AND 

2 

0 

HI 3 

NI4 


Ml 3 

OR 

0 

3 

GC4A 

ENG3 

GEN4 

N14 

OR 

0 

3 

GC8 

APUC 

APU 

A12 

OR 

1 

1 

GT56 

A14 


A13 

OR 

0 

3 

GC5 

ENG 3 

GENS 

A 14 

AND 

2 

0 

A16 

A17 


A16 

OR 

1 

1 

BT3 

A21 


A17 

OR 

0 

3 

GC6 

ENG 3 

GEN6 

N1 

AND 

2 

0 

A9 

A7 


A9 

OR 

0 

3 

GC2 

ENG1 

GEN2 

A7 

OR 

1 

1 

BT2 

N2 


N2 

AND 

2 

0 

A10 

N3 


A10 

OR 

0 

3 

C3A 

GEN3 

ENG2 

N3 

AND 

2 

0 

H4 

N5 


N4 

OR 

1 

1 

BT3 

N6 


N5 

OR 

0 

3 

GC4 

ENG2 

GEN4 

><6 

AND 

2 

0 

H7 

NO 


N7 

OR 

0 

3 

GC6 

ENG 3 

GEN6 

N* 

OR 

1 

1 

GT56 

N9 


N9 

AND 

2 

0 

H10 

Nil 


N10 

OR 

0 

3 

GC5 

ENG3 

GEN5 

Nil 

OR 

1 

1 

BT7 

N12 


H12 

AND 

2 

0 

N13 

N14 


HI 3 

OR 

0 

3 

GC4A 

ENG3 

GEN4 

N14 

OR 

0 

3 

GC8 

APUC 

APU 

A21 

OR 

2 

0 

HI 5 

HI 6 


Ml 5 

OR 

0 

3 

GC4 

GEH4 

EHG2 

N16 

OR 

0 

4 

BT4 

GC3 

ENG2 GEN3 

A1 

OR 

0 

3 

GC3A 

GEN3 

ENG 2 
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5 . 44075895E- 1 1 
3 . 40070 1 94E- 1 0 
1 .3S043177E-09 


SUCCESS PROS. 
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9. 99999940E-0 1 
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Figure 7. Failure Probability - Time History No Power to FCS 1 
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Table 10. Cut Set, No Power to PCS 1 


NO POWER lo FCSX 4/2J/84 HAY 92, 1984 

MINIMAL CUT SET DATA IN DESCENDING ORDER OP PROBABILITY! 


I 

i 


NO. 

CUT SET NO. 

MAX FAILURE PROB. 



COMPONENTS CONTAINED IN SET 

1 

1 

. 13600814E-08 

INV2 

INV1 




z 

3 

.141604286-12 

APU 

BT8 

ENG2 



3 

7 

. 12090941E-12 

APU 

BT8 

GEN 3 



4 

2 

.44258644E-13 

APUC 

BTS 

ENG2 



5 

5 

.37790429E-13 

APUC 

BT8 

GEN3 



6 

8 

,24/278566-14 

APU 

BT6 

6C3A 



7 

12 

. 10540982E-14 

APU 

ENG 2 

ENG1 

ENG 3 


8 

6 

.772673106-15 

APUC 

BT8 

GC3A 



9 

4 

.66983005E-15 

GC7 

BTB 

EMG2 



10 

9 

.571937196-15 

6C7 

BT8 

GEN3 



11 

11 

. 32946003E-15 

APUC 

ENG 2 

ENGl 

ENGS 


12 

10 

.116970066-16 

GC7 

BTB 

GC3A 



is 

61 

,998994816-19 

APU 

ENG 2 

GEN2 

GEN1 

ENG3 

14 

45 

.99899481E-19 

APU 

GEN3 

ENGl 

GEN4 

ENGS 

15 

74 

, 31223751E-19 

APUC 

GEN3 

ENGl 

GEN4 

ENGS 

16 

47 

.312237516-19 

APUC 

ENG2 

GEN2 

GEN1 

ENGS 

17 

72 

.204310066-20 

APU 

ENG2 

GC2 

GEN1 

ENGS 

18 

60 

.204310066-20 

APU 

ENG2 

6EN2 

GC1 

ENGS 

19 

18 

.204310066-20 

AP'J 

GEN3 

ENGl 

ENGS 

BT2 

20 

57 

.204310062-20 

APU 

ENG2 

GC12 

GEN1 

ENGS 

21 

49 

.204310066-20 

APU 

GEN3 

GC12 

ENGl 

ENGS 

22 

24 

.204310066-20 

APU 

GEN3 

ENGl 

ENGS 

GC4 

23 

63 

.174451026-20 

APU 

GEN3 

GC12 

GEN1 

ENGS 

29 

76 

.63857435E-21 

APUC 

GENS 

ENGl 

ENGS 

GC4 

25 

67 

.638574356-21 

APUC 

GENS 

ENGl 

ENGS 

BT2 


* - 
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Table 11 


Logic Structure, No Power to FCS 2 






NNM* CUTSETS OBTAINEO BY HOCUS - NO POWER TO FCS2 4/23/84 mm 
101 ELEMENTS USEO TO DESCRIBE THIS TREE - *0 SATES ARE DEFINED 


GATE 

TYPE 

tt GATES ft 

COMP* 

INPUTS 


2 

OR 

2 

0 

22 

23 


ZZ 

A >10 

1 

0 

B2 

N3 

B1 

B Z 

OR 

1 

1 

BT2 

64 


B4 

AMO 

2 

0 

65 

66 


B5 

OR 

0 

3 

GC2 

ENG1 

GEN2 

B6 

OR 

1 

l 

GC1 

67 


B7 

AMO 

3 

0 

BO 

616 

AO 

BO 

OR 

0 

3 

GC1 

EMG1 

GEN1 

B16 

OR 

1 

1 

BTO 

612 


AB 

OR 

1 

1 

BTI 

All 


All 


3 

0 

NU 

A12 

A13 

NU 

OR 

1 

1 

BT7 

M12 


N 12 

AMO 

2 

0 

N13 

N14 


N13 

OR 

0 

3 

GC4A 

ENG3 

GIN4 

N14 

OR 

0 

3 

GCO 

APUC 

APU 

A12 

OR 

1 

1 

GT56 

A14 


A13 

OR 

0 

3 

GC5 

ENG 3 

GEN5 

AX4 

A HO 

2 

0 

Alt 

A17 


A16 

OR 

1 

1 

BT3 

A21 


A17 

OR 

0 

3 

GC6 

EMG3 

GEN6 

A21 

OR 

2 

0 

N15 

N16 


NX 5 

OR 

0 

3 

GC4 

GEN4 

ENG2 

N16 

OR 

0 

4 

BT4 

GC3 

ENG2 

612 

AMO 

2 

0 

B21 

B22 


B21 

OR 

0 

3 

GC/ 

APUC 

APU 

B22 

OR 

0 

3 

GC3A 

ENG2 

GENS 

N3 

AMO 

2 

0 

N4 

H5 


N4 

OR 

1 

1 

BT3 

M6 


NS 

OR 

0 

3 

GC4 

ENG2 

CCN4 

N6 

AMO 

2 

0 

N7 

NO 


N7 

OR 

0 

3 

GC6 

ENGS 

GEN* 

NB 

OR 

1 

1 

GT56 

N 9 


N? 

AMO 

2 

0 

N10 

NU 


N10 

00 

0 

3 

CCS 

EMG3 

GEN5 

N1X 

OR 

1 

1 

BT7 

Ml 2 


HI Z 

Air* 

2 

0 

N13 

M14 


NU 

OR 

0 

3 

GC4A 

ENGS 

GEN4 

M14 

OR 

0 

3 

GCO 

APUC 

APU 

B1 

OR 

0 

3 

GC3A 

GENS 

ENG2 

23 

AND 

0 

2 

IMV1 

INV2 



i 
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TIME IN HOURS 
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5 . 4404855SE- 1 1 
3 . 40026673E- 1 0 
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Figure 8. Failure Probability - Time History No Power to FCS 2 
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Table 12. Cut Set, No rower to FCS 2 


NO POWER TO PC32 4/23/64 


APRIL 25* 1964 

MINIMAL CUT SET DATA IN DESCENDING ORDER OF PR0BA6ILITTY 


I 

1 

•13600614E- 

INV1 

INV2 




2 

16 

. 10540982E-14 

ENG1 

ENG2 

ENGS 

APU 


3 

2 

.66963005E-15 

BT2 

ENG2 

BT3 



4 

17 

.32946003E-15 

ENG1 

ENG2 

ENGS 

APUC 


5 

14 

. 1640 7336 E- 16 

BT2 

ENG 2 

ENGS 

APU 


6 

15 

.57532455E-17 

BT2 

.NG2 

ENGS 

APUC 


7 

67 

. 99699461 E- 19 

ENG1 

GEN3 

GEN4 

ENG 3 

APU 

a 

67 

.99699461E-19 

GENE 

ENt 

ENGS 

GEN1 

APU 

9 

7 

.67072165E-19 

BT3 

ENG 2 

ENG1 

GC1 


10 

16 

.6/072165E-19 

BT2 

ENG2 

ENG3 

GC6 


IX 

13 

.67072165E-19 

BT2 

ENG2 

ENGS 

BT7 


12 

11 

.67072165E-19 

BT2 

ENG 2 

GT56 

ENGS 


13 

3 

•74346942E-19 

BT3 

2NG2 

Gr.N2 

GC1 


14 

6 

•74346942E-19 

BT2 

ENG2 

GT56 

GEN6 


15 

4 

.63461459E-19 

BT2 

GE « 

GEN4 

BT3 


16 

100 

.312237512-19 

ENG1 

GEN3 

GEN4 

ENGS 

APUC 

17 

65 

•312237512*19 

GEN2 

2NG2 

ENGS 

GEN1 

APUC 

16 

64 

.20431006E-20 

ENG1 

GEN3 

GC4 

ENG3 

APU 

15 

60 

. 20431006E-20 

6C2 

2NG2 

EKG3 

GEN1 

APU 

to 

79 

.204310062-20 

ENG1 

GC3A 

GEN4 

ENGS 

APU 

21 

66 

• 2043)0062-20 

GEN 2 

ENG 2 

ENGS 

GC1 

APU 

22 

75 

.174451022-20 

BT2 

GENS 

GEN4 

ENGS 

APU 

23 

12 

. 152C5106E-20 

BT2 

ENG 2 

GT56 

GC6 


24 

6 

.152051062-20 

BT3 

tmz 

GC2 

GC1 


25 

9 

.129629472-20 

BT2 

G2N3 

GC4 

BT3 
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Table 1?. Component Failure Rate 


COMPONENT 

LAMBDA 

Reference 

APU 

0.97999970E-03 

i 

APUC 

0. 1499999XE-03 

l 

BTI 

0. 22699970E-05 

I 

BT2 

0.22699978E-05 

t 

I 

BT3 

0.22699978E-05 

1 

BTA 

0.2269997CE-05 


BT7 

0.22699978E-05 


BT8 

0.22699978E-05 


C3A 

0.22699970E-05 


ENG1 

0.X299999XE-03 


ENG2 

0.12999991E-03 

iaon 

ENG3 

0.1299999XE-03 


GC1 

0.22699978E-05 

! 

GC12 

0.22699978E-05 


GC2 

0.22699978E-05 


GC3 

0.22699978E-05 


GC3A 

0.22699976E-05 


GCA 

0.22699973E-05 


GC*A 

0 . 22699978E-05 


GC5 

0.22699978E-05 


GC6 

0.2269997CE-05 


GC7 

0 . 22699976E-05 

\ 

GC8 

0.22699978E-05 


GUNX 

0.X1099993E-03 

\ 

GCN2 

0.11099993E-03 

I 

GEN3 

0.XX099993E-03 

Quoted 

GENA 

0.1X099993E-03 


GENS 

0.11099993E-03 

\ 

GEN6 

0.1X099993E-03 

L 

GT56 

0.22699978E-05 

Tinn 

INV1 

0.36879967E-09 


XNV2 

0.99999932E-04 

» 


390 



vs 






APPENDIX C 

INTEGRATED DIGITAL ELECTRIC AIRCRAFT (IDEA) 
FLIGHT CONTROL SYSTEM RELIABILITY ANALYSIS 
MESH NETWORK CONFIGURATIONS 


By 

W.G. Ness 


U 







INTEGRATED DIGITAL ELECTRIC AIRCRAFT (IDEA') - NASA 
FLIGHT CONTROL ST STEM RELIABILITY ANALYSIS 
MESH NETWORK CONFIGURATIONS 


yjLcuL'^o^*. 2 t£cd. AC^O "C& U. Z« tf"e^S2^»c JL 

CU*i d +£ iM - I?*. jL&^JLt <TK 

^Otyj^ei/. (E&C&U. &uiou^6~ (idea,) 

aA*jLiZc£iu*L ivno&A* <***. sm**/ /KX^KrtJL 

UCZ**"**. . V— /ULch- * 

■^4-tC A ^Lur v/t ju r c. A sveA<£ 

/ 1 J j L M j~ui^ 6 ^t- /Upi/fc*. . *jf<X*eA. mXjJl /H&Zii. rmJLi. «aX£. ^C*£«ur»*-c^*/ 

L+. "£&** ■ 

ijfjj t / du**sja £^c« / te»«u <»«. ob **£u £&Ap 

-£&. e/*^e***<4L Jse 2 S*re&+. “2 ^l. 'ttCxex. sr * **-£& < . 7^. 

^e^ittna^e-7. o^CsZLl^S&o*. c*^. "2* Lc £<t ^^Zau/^l / 

~&JL <2sn*j£yj44. L*K *£u*edu. <d£ A&TL44TU. t ^A^zAt^o-t^ , Atu. 

, CL*lo( /7ue^CJld*& tr ^- 

^^crl / /ia^. ) l£<Ujr , a~U?( ~&L>Um£' . 

sJty^Hg^uCZtCj. 7^ U a ti££, 

"feji . /28JMJ&Z c^ ^Ec OsAfdjJu. k ^p± / 1 /ZL/ 10 & KM. /y^tAAAcr^ . 


* 



NG PAGE BCANE wa «ttHED 


■ 4 ■ . **• 


393 



w romO(MUP 8UNK 

4 
















396 







•*' V ‘WSv \ • v 


HRS 

NETWORK 1 

Network 2 

NETWORK 3 

2.0 

.43C3T3* » lo'" 

.4343*33 * /o’'* 

. £343*40 - /o 

4.0 

. /3 31441 * I0~'° 

. / 334 44/ - /o" 

. /331444 « /O* 

4.0 

. a/ia, 05T * /o 10 

. a/ 120 ss • /©* 

; .2.11207/ * /O* 

z.o 

,3X137/0 * /0 /O 

.3X137/0 *16° 

. 321 3741 - /O 

JO.O 

.4741213 « /o’" 

.4741213 * /o'* 

. 474/310 - /O 


FLIGHT CONTROL SYSTEM 
Failure probabilities 


Ar*** 


i 


i * 


FAULT tree ANALYSIS 


“tic*. 

( o** 27Zr£> ^ad!uAMm } O^vn T« 

^enZ+iAtU €T^ tj*i«^ + n4+.t UtncZZ yi CWfW4i^4Zi»i &JL 

&*L s^LdtStA. C^U ttitcZ+m^ CL 

aj? "Ma. tteCj Jt &uxefam£ 'tibt A&irtA+J- /-r*w^-t 

a-Ax /i£^a^Zk+( £&i*x*^jL+*t£ , ^C<a /G-+l*sis~*^. sr»%4*cX. 

tt*i*** € cC4ddk4^ *#** 

& /£< <dj£# U/K -l£* , 4*t srnJAjC , 

^ eu &Ut * Ja*+cJL&j. J[*vruj£ 7& £t. /* tjjL^o^U. uijfatA. A 

^aur $u*£l . sJ^jtMc To/* *1 s+*Mn£&*^t. oAjl c^yjae&eLmJt J 

Ja*Uj. 3$^ ^UAstkC£ a. ^UU+6 4. OfU>/ o*CCMA*jti «~c *u4yUd. 

^©■i a 4y x2£ m \ urh*A C^m^£t4J^, c*%*£*{ <tC(mA^UjL 

jaAo£u&y£ SlAA A** ^U^ feS r H f 



'd*>*4. <9^£fui£p*ur sd^etdC^ &t , 

o*k a t iTt l n^ o^, t 4*^*n4. c&Z Kod&t J &t OnCfti-t 

/r * c *■* / & . ■kxa^. urb cJL Ae J(<<t9i ~ " — *~ — ^ ^ * — "“^ 

/j*Aoc£J*<rU. . 


&C A. 4 * a«i tcn0*JS!n\ /^ru-t c<*CC%*d&t 

. XU. " 4-- 3*S ^ << d c ^0>n A. Xcu^*<A*j6ct 

~6b "i£jL ^lU/u£ s*. <rt& t 
jU*£tcu£u. **«»/ Z$d /rurvA. . 


l*\ 




398 




















‘ 4 , * 




LOSS OF 

hoai»*tal. 

STftftfMUR 

ACTUATION 


$ 


tf£5 OF 
H6f?. stab. 

EMAS 

f,a,4 

T 



Lo« ®F 


LOW OF 

M0«,*TAB. 


HO*. 5TA». 

KMAS 


EKA5 

1, A, 3 




S 


E 


Loss OF 
Ho R. 5 7 «B- 
EHAS 

a.V* 

~ r - 

D 


SIGNAL 

SCl-CC'/ 
r'A \ 1 . Jtf : 












V 


£ Nil £< j£,4se*n£' ~d^+£ 7^ ^ 

4M&<<AXt,L ’t&ruyA. /n*rv6t II U 7*+£ . (sJu. ) 

•£*X A *he.*p (“fr.° "t */o" fc ) » jatrC+CiX^ «S /r*09&. -£ 


jZrvt* * CwCC*w£4t4. o£ /»Wr4 ♦ xwW* 

* 7^ y&j&AL 

/t * ' - €.y.p (*^.ot»/0 } * ^ /^Wc. 

s*-rv(a. s^e**sGI. + sn*Wt. T% m&ca&VL 7*&. 



f(E Nil 


No fOWW FAluJKE ^ • /<- + p(Al) 

* yti + P(©<3)PCohO P(o/s) 

* ^ ♦ £*♦ PCAIO'QU* P(All)]l>* PCAlOl 

*• ^ + EA* A*3EA* A~]t a ♦A*! 

* /<. ♦ A* ♦ #(A*) 




<3^tC s%nj£z£ ti 


OU 

771 


/.) jjjtbtmA, Oj? &tdtA A ^ as*^ T^Tut CuUL 

A*v**cs. A ® “4 « /0 5 ** A ^ “ / 2f 6 * /° 

77. /jtA*4r*L£rJ£jZuj F* ( A *' ) “* A , ~t7j^ u t JA**CjL 

7a tc jh. ~£&. sra^ZZrv-L& c^-jZ*( ^ 

AA***A++<^ cf 0&+~r*. 

^ "am " -^6 A 

rj? r. y/ 

7*7* ** fM**.'*.. ^77* *p**U/i+£ ^if n 

/4A/6 ** £*££ tuc j&. ~iL; 

u *a tA ~t7L i*C*e^UL*r^ S3s7+Uf*\ 7+&ur' ; 




I i*«^ri.^ ^ 


* ffdMN 



403 



it 




A A 


Z 


z * 


z * 


A • l - e*p 11 jo" 4 } s 

.mitooo" .mm 
Z • A. 


POO • ?(*>)? Co) 

• Ca*poo3LA+poo] 

z « <A*z) x 

3 • A**.lAl.*i* 

*.*«• (iu-Oz. + A* • o 

O-aA^VfoA-^ - lA* 

A 

c LAbi^SSzE^ I ±Zi 

X 

Ll-AL1*U:AL- 

x 

. OOO 0 (m art ~t * JO /Jvu . 

1221 

*■ .000000003605 


X *- 


A * .060000003^ 

/v+£u . /6U««., 


4 




• /*% tuu. 

du Po\)m t . A ** 


P^E Mu I POkfc*. SUAFLT 2 F4lLt) * ytl + P(Al) 

* >C ♦ P^dul P<J>/*) P£/s) 

* /* ♦ La*poa/i)3 

* /«. + [A*Pfr»)p(o/f)J 

*/*> + [A *lk+r(Ait)llhi r(Ais) ]] 
8 /* 4 I A 4 £a-»-a* 3 x J 
* fA+ A'-uAV^j 
s yx + A +/i*«£A 3 + e^A*) 


404 










i 


P(E Nil I Pov/c* sorrcr 


fails) a /<■ «• P (Al) 

* yU + ?(oi>)P( 0 i*r)F(ois) 

- /<. . + £A PM)]LW PfA(/H La* pm] 

* /t 4 £A ^ A*] * 

* ♦ A* + •■(A*) 


P ( E /sill Pf >'ER SUPPLY 0 FAILS ) - 


* ^ + P(A*} 

* /4 * P(on)p(ot+) P(o<s) 

* /C + [A* P<A/o)][A 4 pm] [a* PM)] 

6 /* + ca*a 1 ][A+a][a ^ 1 3 

- yU. * 2 A 3 + *(\*) 


Ci^c , CeruAdC. , 

PTe MM I POL/CA. SUPPLY 3 fails') 


4 M'+A*' 


© 









Eh /8 ^ l&Ls? ^ 

/Wt, JT <U J&tX" ( yLt. ) 


PCeMjI Mo Power. 6jPPly loss^* ^ + FOu) 

* A + APfoOP(oV) 

s /<• ♦ ALA* P('A3)7CA + P(Av)1 
s /<•■*■ A CA+A X ) V 

* a ♦ A 3 * # 6 * y ) 


P(E M8 1 PS 3 FAILS ^ a 


/*+ P ( Aa .) 

A ^ A PCoOPCe^ 

a* ALx+p^n 

A + A [A * not) pc/*)] 
A + A [A ♦ A +• P(A5^*] 
A * A Lj.a +a z ] 

A + ^A x <- A 3 


P(ENt I Ps x Fails) * j 


P (e HI | P5 | fails ) * 


A ■" P(Ax) 

A + AP ( oOF ( oi ) 
A **■ A 3 - off) 


P (c M* I Pi t> Fails) 


A + f ( A ^) 

A *■ A P&Of(o 7 ) 
A *► A 5 «■ o (A*) 


407 




k 


I 





ORIGINAL PAGE n< 
OF POOR QUALITY 



NETWORK \ 
















'~£&*<*^. /twv4 ? 4 s&iX . ( 'daa. ) 

P ( EL N*\ | No POWE* SOPPlY Loss) - /<, + ? (ah) 

* /of PCoai}Pftaa}p&>i*) 

s /c + LA+PCA*)][A + P(A-w) 1[A* pfAoi)] 
‘ /x ♦ (A+AV 

* / ♦ (\ 5+ 9^0 

P(EiMT | ps 3 pails} * /of* P(Ai?) 

* /L ♦ Ptf^v) P^05.3}p(oa.O 
*/*•*■ [A* P(A*oY 5LX+ f(Aii)l 
s /<• + [ A + A x 3 C A *► Al 

' /c ■*• 2.A 1 

F (£ NT ( ?5 A FAILSj 1 ( 

F* Ce NT ! PS [ PAILS ) = /<. + PfAl*) 

*■ /L + P (oxO P(o^s) P(ovf) 

' >t f [A+ Pf4*D][Af p0u«)3La + PCAii")] 

- /<. ♦ D-'- A a ][A* A3[A*A*] 
x /c + aA a * tfCVTj 

P (s Ni | P5 o Fails ) * /o +■ P(ai?) 

/*■ * P(oiJ.)pfoAs) pCoxt) 

“ /*• * CA ♦ P&/T)]lA * PfaAo)][A * P<7Ui)l 

* /4 ♦ A 1 - * fA *) 


* •*» „ Ab 4k -' 



.<4p **9 b#v 




? 











jCzt E NlO jk. "tiC. Z * CL jdMj£4CAj$t4. 

/O U ^4h£^~. ( 'J**> ^*3*' ^ 

P(E Mto 1 no power, auppcr Less) » /x ♦ PfAa.*0 

* ^ + PCom} p (033 l) P(o *0 

* /c + Di * P(AaOlU+ P(Ai^l[A* P(A3®)1 

- /c*(A + A')* 

* yUL + h* + 0(h 4 ) 


P(E NIO | rs a Fail*) - I 

Pfe Hjo 1 Ps a Fails') * /c * PCAa.'O 

* + fto) PG^OPC^s) 

* /c ■*• /\ + fC^as) 

* ^ t* A * p(o**)P(?^s) 

* /«. + A * A ♦ P ( A*iO 

* /t * aX + A x 

P (c H» | Ps i fails') * ^ + P(Aja) 

* /<* Pfr*i)P(.Ai)Pfo5a) 

* fc ♦ [ A + POM)][\ + P (Ax*)]D> * F&ao)3 

- /< + D*A\][A ♦ A*][* + P(?$»)P(oy?)] 

* /c * L\+\ x l x [ A * A + pfAsO] 

* /4 + aA* * * (A y J 

P (E Kio I Ps o Fails) * yU t ?(An) 

* /« + p fos/) rco»>-) pCou) 

1 ^ 4 







£NlA. <£*. 'H&l Jt*trG+£" "£&. z£ nfs «. A**& * C * c &t 
'&0UJ& swtevU 12 u. £*2? , 


P(ENl* l No rov/cR sveny loss) 


s#+ p(a*u) 

yic * PCoso) X f(os i) 

>c * CA ♦ PGw)] a LA-*- P(A4r)] 
/C + L.\ ♦ A*JA EA+A*J 
/*. + h* * &C\ H ) 


P^FAllaJpS o p^iu) * /* + PM4 0 

* /t + A P{ 05 l) 

* ^ ♦ A Ca ♦ P(a **)1 

* /* + A EA*Al & 

PCbNI^I PS I Fa/ls) * /*•♦• P('A44') * /4 AP(oS®)PCo5/) 

* /tc * k [A *A JCA*A J s ju. *A +o(X* J 

P(£Ni*l P5 a FAIlO * P(' A 4 0 * /<- ♦ AP(05o)P(o5<) 

T /<• + A tA * PrA 47 )][A+ P(A 4 J)] 

/* * A £A ^ A ][A*A X ] • + A - 0 (A*) 


F ( E’N 1 x I PS 3 FAILS ^ 


51 1 













EKl3 7^* ^«cs £ 3o a. d**$+c. A*6+i. 

* i % ov 6 l /3 M ^ 4 ^, 

P(£*Ml3 ] NO fvR. si/P^L'r loss) m ^ «■ TCA4 a) * ^ * Ptew) P^ofc?) P<04t) 

* /« + [\+P(a<.$)2LA * r(A<*+)llA+ P(ms)] 

* /c + EA + A a I • 5 * o(X i ') 

P(CMIJ I PS 0 F/4IL5 ^ ^ ♦ Pfail} • yU. * P(Ot7) P^oir) 

* /*+ CA + P(A14)][A + PCa6S)1 
~ /* *■ LA * A* J£A + A * ] 

* A * -U ' * 2A y 


PCENIsI PS I Ffllts) * /A. * ?(ALl) • yU ♦ r(ou\P(on)f(<3<o*} 

8 A *■ lh + ?(A <->)]lA ► fftftf + P(MS )] 

* yit * L\*aHa*A v ][A*A I 

* /C ♦ Jp + 6(.\') 


?(EMii PS JL FA M'S ) » /c* P^Afca.^ • A ♦ Pfr«> r ^4?) P^O 

* a- ♦ la * p^ala* tcau^iia* pfAuvi 

r A * rA-*A fc J£A^A*]EA+A] • / &*;lA , **(V) 
P(EMi>| PS s F Ails) • I 


415 


I 


7 * Ar - 









(1 


T'Cl+uy'^ s*s*6> J4 U JLut. 

PC EM)4 ) no fw St^rtY loss ) * /c + PfASa.) • /*.+ P(o«OP(oS7 )r(ost) 

* /<* lA 4 P(assOIA 4 fCA3*t)][A + Pfas)l 

* ft* l\ + ^l * ^ 4 A * 4 $^A ¥ ) 

P(fWH | P.S o fails') * / 

P(e>Jj* | ps ( fails') ‘ Z 4 ■*“ P(AWl) * ^ *• pfost) PCosr) 

' ^ IA 4 P(A5*V3[A 4 P(AS*fl 

* LA 4 A 1 ] [A 4 A*1 % yU + X 4 aA 4 oM ) 

P?EKll4| PS A fail*} * ^o. 4 PCa«^ * /<- 4 P(om)P^ost) P(bs») 

* /x 4 Lx 4 p^as>)1LA 4 p^as^][a+ rcA5*)l 
^ / a 4 EA 4 A*} • ^ 4 \ ' 4 ♦ fA *) 

PC^flPf I PS A Fail* ) * /4 4 P(A5a) • ^ 4 PCost) PCos/) 

* ^ 4 [A 4 P(a5s)]CA* P(A&s)3 

8 /X + [A 4 A 1C A 4 A 8 ] 

' /<• 4 iA 1 * +AX* 










****** V 


tr 


^ EN!5 /t ih tC6 7# a 4*JUc*At 

/ .5 jhift . 

P(EMI3 | KJO Pv/R auPfL'f loss) - /<. ♦ f(A37) * u * P(o4-l) PCo'h.) P(o+, 3 ) 

r Z.* £A*f(A»rt][A+ P(Am)]LA* P(/k*ofl 


P (EMI5 | PS 0 FA U.S ^ 


Z-^Ca + A*] • z 4 * A' + ofA*) 


- J 


P (ENIS I P3 | fails } 


p (EM|5 l PS A FA/lS \ 


■ + P(ajt) * z- * PWr^Orfrtfi) 

- /* * Ea* PCa 3?)][A - fvWHA 4 pca^] 

*/*-*■ E A * A IT /» +• a! lA + A*] 

1 /t + fA x + *f-\ % 

*“ /C +* PEA 37 ) * z + P(o^i) P(a¥i) P (o , 43) 

* /c + Ea * p£a3?)]Ea* p6*3i}Xa+ P fA4o}"] 

* /c - rA+A'3 5 

S /<■ + A •*■ Crf'^) 


IS 1 P 


S 3 fAlkSj 


* JU. + fC^l) ' P64l)p(04a.) 

1 Z** LA+ P<'p s y)}LA+ POi 4 ?)! 
s Z-'f'VAllAtA 1 } 
e A +■ aA* 4 ^ 


; *• Ar 



& - /“ e.*jc> (-/.Lt * to *) 



mJj£ccAC. 




P(E Mil) = p(£ MU I No ps fails ) p( HQ Ps fails) 

* P(e hii I Ps 3 Fails) P(ps s fails) 

* P (E Nh / ps A fails) P CPs a fails) 

+ P(E Nil I P3 / F/ , /lS ) P (ps , fa/Ls) 

+ P (f m/I I PS 0 Fails) P (ps o fails) 


* C* + A 3 )(l-4e) 

+ / a 

+ (/<.+ A +y * H*)e 

+ C/t * A*) 6 

+ </**aA 4 )e * w ( v * p(EiNn) , 



PCe ^ * p ( e - x 

- (/<+ P)(i-46) + + ci)a 

+ (^4+A 3 )e ♦ c/c^A 1 )© 


P(E * P(E .aUs) - ^ 

* * (/*. + a\ x +±\*)e * o)e 

* (/c* *A*)e + (/A+f) 6 


PCs N/o) 


P(e rUt) * 


2 


* 0)e 



A")e 









PCENix'i * (/^A^ / -4e) ♦ ♦ (yu. + l*)e * (yu*k*) 6 * 6 

P(emh) * (p i+\ y )(i-4e ) * (^i + zA'-Ufte + + z A*Je ♦ (/c+ifie * e 

P(e^J/4) * (yu. + \ i )(i~4e) *■ e + (yu*A'*Z^)6 + (ytc+ X*)6 +{/c+zA'+M % )& 
P(eiJi^ « (/c+A'X/'-fe) * a * +(yu.+h')e ♦ Cyu+Zk'* ^\ i )e 








‘£^*\t4A *< rv 


,~2^~ 


- ^ + © *-)? - yu.e - e A* + ^©A 1, - 

P (e»4^,a«,/, * /c +© * A J -^c© ♦ eA* «■ s^A* 

P (Ehlio / zc+©'*'X" / 4<.©~0A > +j©^'>'6A * 

P (emu, x?, 3 ; ii^y = /t ♦ © * X 1 - /<.© + ex' ♦ ©A* + e\- 

P (ENu,a«, f ; * JJ^ + $ + x’-^© - *^eA 3 + i©A' - 

P (ENl3, 31, 5, 21 ) = JJL 4© ♦X'-^ t © + 2eA' + ^©A*" 

p c 6*m, 3 o ; t n) * ^ + e + X*- JX& + GX 4 * 36 X U 

P (emis, 3/ J i J a*) » -<■ © * \'- y u.e + 3©X' + ^eA* 


** 

X/ 

2l 

v/w 

ss 

-H- 

uc 

v/\/ 




xi«r 






t£« 


T 

S^uA *■&«. 


z£^~v ^/<- •-«*/ ^ T&jt ' ^vloaZzz+% 


■*7 


■'/ . 


o 


421 


■»r 









vw/, »*,yy, ss j ^ > ov t 

sncJt JIcCj+JL + / , 


W j£ri. 
<>■** Ttf JU. 


3 . 01 ^ * 10 


-s 


J 5 t. 



* 3 h 5 a *£c^X 
/ncs Jz. ~ 

A A '* *-. . . / 


*£*££*4, jde^tu^u / 

cvrj[ a*v>C/is*i^ svmjhi*- j&du A X, U **£e£&*/ 

C c r* ^* ***^ s^u&v tz. . 


Ci-n ^crt 

of , ^ >i4 ‘ «l ^c\rc*\ *run&* t ahx. 

sryusjCt /r^o-io- ^C<t^ l^t. cf 
A**u*y iJvltz o-t^sC of^ sf^-UA - ^c^ul l*e 

urbcA* A s 4^£*4A*&CA CA , C^r*u**&L 

. /? . s- • / * 




r 




^.Ttr/ ,-*rr .-. £MflS. 


-£ &C 


ff^cT , JdZ? £ &OC*£L d A j & t C, t ct*r-W>^ 0 £sC**C^ 

A “ of y^eCtiZi ££jhru^>. \ smm£a 7 t fi f 2*H 

B 1 *£o*t<. of yfoJ&i T&Xe-*^.*. yr^rz^. ?, H , 

CZ * j£o*± of 7 a '/ irttuyL srievfa*- % , ^-7 

D = /jLe&t 7%APtA*>f /v*y*bj. /^ «£•*/, -^7 

♦ 

Pi OoAA of 2> C^nCZlot Ju^saojU, ^T ELH"\S I ' **• £MAS 2>^) 

pIaubucudI *- P(A) ” P^3) + P'c}* s/ 2 y ' 

- p'lfs' - s 'hCc' - •P'Af.: ■ PCsnc) - PCft:?£; -?fCi 
+ p 'V.snc^ •+ p'A03f?i' * Pfa / -.c *. a n ! ' francos) 

- ? < p.r.&cz r.$ y 


P(t) POOfifaf) * P(s)f( h) P for} + P(r) ?(*¥)?&) * r(n)ffal)pfi7) 
- t,P(i)P(n)P(*4)r(i7') + 4 POt)PO>) ?(**)?(*) - f(?)P(u)Pfa*)P&7) 




2$ S)V^ * 



j/fjZuAJU 

e£<r* *r*&z£ov& , 


P[j^ c/AC^e* A] * \~t.*p(lOt NO'^) = & 

?[JU *{ »^oU^ 1 * l~**f (l4* *1^1 9 * 

P [^Zvn*Oti EMAS 1 a l-^f '‘yo fc ) - p 

|-eitp(.7^-lo"S *G 


P efjL*+y<r^ sfc&rfyiA ZHfi* H * PlAvof /*fL.A&l. £MfiS3l 
= A(m)^ww) + 2{MXww)'o(wftvu) + D^H+F + G ** 3 P(0* 

p £ 4* *! itMfA EMflS a] - P </ *£♦. EHA!> * 1 

•* O+E+F^-G * T- P(^ * PC*0 


u tS c*Jc+jZ <# 1 *#£ 

XL s^U. J^uyr-ZZC^ 

C t X^&uO &LA • 


</ 


2^**- 


424 


,W>*£ -»*<*»**'"- 


@ 


A “ JZ<>44 of jb*^cn*£stf^ A& 4*AyiA E^AS ^2., 3 

3 ' A*+* of ^r'u^oK^SJt E.HAS Z^i.,4 

C' r £e*j of A'u^ex&t aA&A^ba £^\AS (j 2; V 

$ " f+44. ef A&jfchytA. £HA3 2 t £j*f‘ 

P r A* «/ 3 fU. *&£. EMAsl “ ?tA'Ub'\JC'ub '] 

* p(A') ♦ PCs') ♦ PC CO *Po'; 

- P(A'ns') - pCaTic/)- PCA'rt&'J- PfB'ncO- pCaW) -fCc'no'.) 

+ p(A'na'oO + pCa'/Ob^d') ♦ PCA'nc/no'^ + pfVnc'nD') 

" Pft'OB'flCflO 6 A. ) 

* PCOFCa^PC*) ♦ PMf(a}PGdt P(0PC3)PO) + f(a.}PC*)pC4) 

- £> P(i)P00PC3)PC4) + 4P0)r(a)Pfs)M) - PCO PC*) P(i) ? (*) 

- S*T ♦ ST 1 *► s V + 5T X - (oS x T > ‘ ♦ ^‘t* - s x t' 

= ^S X T + A5T V - 35 4 T** 


jZ^li « “Z^L vf £rU*~y 

Q^U^er ^ . jA A*fA US& /k- CLL&d 

is A* </ 




LI » LffpT IHBOARJ) 

(LO ' MfcWT OUTBO**fc 


























id 7* yrto'&Cjt L^bA CJ^O+\ T^L “Z^CC t4-> 

erf: 7>!x '"loss OF smA-S *3 * } && G«*+J^4€dm 

« ^-2* t(S 2#rtc a u< < *7^ k^4+yr* 7 *-C 

EMAS. $/>ov*. TS^A s£coe£ , j&ujtt&L j ~t&. 
cyuuZ&L A&^t***^***^ 7 $jl /lwA? C0*&uA. ^tc** c2Sr* 

^ CX^^OA£^A~ . <_7<H eu&tff"*- j CLd ** **<. 

ezcJtZa^ei. u o^be/leAurt , ~tS& ddU^Le*. u y&tAlA . 

<J7>£ <^ <^K EMAS ^ JK&S, &A, 7j& 

C€4& *K. 

M - * Ji(U)M x - 3(4i?M X + b*E*F i-G 

'-^C ^d-l <7^ a^t t^J^ETtW^ , ez^c( Osr\ aZA&p&lrt euA&tC^* J 
k*d sJi'i<r6-ojZiAiAji^ eyove*\ • 


INAIL * M 


<3UT/HL- * M 


wJCaC A*r& C^J&cA id “Z^tT 


y -3&- ty*+X**. 4 ; 


/ 2C£. />*&<£. Ci*4kA4r*d 


P E 3 aulClAak* 8 !A/ •OUT * JN-OoT •*• lN -OUT X t- |N -OUT 1, 

“JW^JT 1 - i N 1 ’0UT t - | N *C UT V - /A/ OUT 1 *- /tf’ouT* - /A/Ouf 1 
f |AJ OUT ♦ IN*ouT% /M'ou T l + INi^OUT^ 


, i *• *• 

- /isl our 


fM S - 3M fc 


* ^ ‘*2*F» 


© 




















A^t«/ ik Cn^Lf\ ajf t ^ 4 * / ‘ 

C*r£&&£ . t^ijv ojf '&£+ <X ZS*Z&»*4 u^cJ^cAi^C Z* 

yr-tre^OA a~*»( JL7 , <a*u/ a^J. 7 « s***rdzA 

T y to, H, *~*S -34 . 


P[/~ / £M*S */] • S 
?l iLu </ stms-u] • T 
?l l* *f emas-j! * 5 


s a r 


t P £ jCal <rf A**^*&A 1 * 


















rit&L *£> y&v* IZ^ucjX c<*Zi+£ 9 /~*X 

J2sa*cs^ ^vL *t£ld Of>*&0&C' U* G^<4^£ . Z^-^A-C 

; "2^, U*v*2tt 

CrrCCle-&JLCJ. U ^o%~ <**<•*£. 


Z$£ 




^ PC^- / BMAS /tn#2ft J * ET 

vj^ 4 -» P T <?^ A^y^* C+«ZZ *4 ctu*A • 3 *■ * i~E~ 

o~j. , 


P £ io*A of &i'ju*JC Cwfc* 42 tA. ** / J* (M-E> 1 f) x s ENGCi 

P r £**± ^ dt***£ A*y**K cr*C&+&t*t - J J ' CT“ Ef + Ve) * £N(^C1 

^ £+u of et+*jZ J e*~y*** C<r*%**&hi *3 3 * (M*E t TTe ) ■• C HQc I 


p r 


P r Jhu\*f t£uu* cr£&+ 4 . 7 * PO/u) * PC m3) ♦ PCaos,) 

- PCioa^s)- PC injm) - P6oana) 
\ «■ P (10203) 


\ 

ENGCI • EN';ca + 5TNGC I • EfJGci + E^GC.2 • TNGCI 

ENGCJ *E>^SCX * EMGC I X ‘ EMGC.X - ENGC| X - EMCC X + ENGCl ^EKGCi- 

s 

\ a * 

* AENGCI-FMGC^ + EWGCt - JENGCJ •ENGCi. 


Loss or RCQUIft.60 5 BNS 0 &S 


+jr 


*r 'A * 4 ,^ 


<t4C /0 V“ ^ £*r?elc^ is* *^t * c tr 

u*Z(Z "t£*± (tu ’ 


&EHSOR OiMMTir Y 


Failure probability 

/. Cold mm AosjTioN LVDT 

Y 


p' m 

1 ■ exp (.7t m lo 

J. AOR. STa*. POS. LVDT 

JL 


K * 

) * exp Cli * ,o' 4 > 

3. RUOOCft PCOAL LUOT 

Y 


r : > * 

) - exp (.74 » /o'*!) 

4 WHEEL RVOT 

Y 


p« ' 

1 - exp (.74 ^/o" 4 ) 

S. ANGLE OF ATTACH SBHSpK 

H 


p* " 

1 - exp 6.54 */o” 4 ) 

i. ErtClHK THRO me LVDT 

U 


K * 

1 - exp C.lt «*/o *) 

7. f<TC4 AA7£ GYRO 

4 


K s 

/ - exp 6*4* * /o~*J 

T. Yaw rats Gyro 

4 


pi * 

1 - «/p (><►* * lo^J 

1. Normal A cjlclcrom«7£-r 

4 


p; * 

1 - e*jo (74 4 */6 ) 

10. LONGITUDINAL ACCRUE RoMCTfiR 

4 


p,: • 

1 - ~xp (74*. mo’ 4 ) 

II , IUEA.TI AL REFERENCE UNF 

4 


pT, - 

| - exp ( loot *io 4 ) 

<^2*5 X&ut ~tuj9 ff? JZ+cX. 


~t*yj*4. UL 

/rUAC&AOAy, 7* 

10 cAA CU&X 

A 

s^oX£t+u. , 


v. 1 , 


A£^4}AjUkcA 


C+** 


**>*4. i~XLL - AZiujg. AL*£t4**t+ 

p (4 *■ /- exp(-.o 75t */o 4 ) , 

>* 


sj£au£iAAJL 


***. <UtSi-D4*C* 



zh™ e>*l sja+tuCA 

. t o*ue. ^r** ^ C A£**** *4 ~£y 

cJu*. 


432 


2) 





£F 


I ^ 


i 


b 


^A^cJL^nj^ ^uJuAL f 0»* stum* & r*4**(*A 

v~d*£^ ~t&£ -fib ^h*z£c far* ~£&. 

/n&o&L / i J t< J L c* if**+ “£$l 4&nA&1. ^ 

C*rrfa Zfct 7^/. U**Je( ^ A <fa^<xJ(. 

*>* , <&+£ Jfc siurf cx0&ac£u, /&&-+> 

fa “#£ SMAS c^ZiJ . 

\JL*Ccjl. T&itM. fatl/toLL ^La+Stl-^x^Za* akAt s*0~ 

C&r+L. -£a £^fa. ^C AO**A t off 

"ti&L. srxOV&L &t “&£. UsvtdsA. 

&(rm ^ A CGmA^ZSZn^ st /& ^ & 

<x<Z>6l*/ 7« fa*^Z<AZ. 

/^iA«C^£n^t^cc^ ~z* au&c*+*Jt fai ^t * 35 ^ faxJ^***- ’ 


tth lt XX IVY ♦.» . *. 

V' 





,J& 


Pc 


pf + V , fa ( - * 


* 4 . t £ OOLdA. <rjf /n&ZZsviJ^ ) J ~$£l faz£~ 
sfat^tAG. ^A0><\ A ^caaZ &•< 

/r^rre/jL (S oa, pCrv*. 7*f£uf~ fai*** s**w&*- 

V t ^ (0 c~**( U <xaCe£JCcdr>^Jt ‘7/dcuU. } CW,SS *C^ «■*#/ vV 

etc2£s~**o«~*£>t . y^^MA. , l G*Zjj, J 


OJ9ASL 


^ . 


WU/* XK * VV * 2U » Ul) » SS ♦ 'frf f vV 
n - 


433 


* *^r ****& * 


@ 



LsfvrL 


■&£ -«v*^ AOA, KSP, CP, WHL, PE 6 , TMR, N A, LA, fRG, YKG , 

XRU A tCc \ 

AoA ■ Oj/ -3 o< *f <***J&. ^ aJt&cJ*. 

Ojf 15 oO. U* A^tii ^rn 

C.P "■ a^ 7 H 7 c d+t+r ^*. LvdtI 

WML - of 1 «. V «rdu£ RVOrl 

PED * 1 ok ¥ si4Ae£c&t. Lvorl 

THR • /^u <7^ ~Z&*ZZ&k. 

NA * ^ y 3 OK *f s*Ue%*~+£ A * C c 4& »Ap**4&< 

A - ejf 3 oK *f ot^c*. c t&l 1 — rf (V ; a 

PRG * 2^*4 «^/ i o{ f /uZZ 


trg 

Ipu 




/I 




TT**' 


A€f&4M^CSL 


? I £~u. of AJL*i*en 3 = P£ ^u. /»vY £*&&*( *Ji JEtlJ 

* pr^/ jpachj. t^o- Iny XPul PZu-u rf IPO] 

P ?AOA U HSPu CP U VHL U PED uTHR u (TPU*) 0 (NA </ LA 1/ PRG u TRG 


5 E/S/S * [a«>A 0 HSP 0 CP «/ WWL u PCD uTHR d (T*J ) n ( Na U LA u PRG 0 TfcG)^ 


PtSEAJil *■ P [SEMS | Na /vv'/OfOfC POWER SJPPL'X LOSS ]£nO PS Loss] 
+ PCscws I I PS LOSS] p[, p 5 LoiS ] 

+ P [SENS I 2 l PS Loss ] P I* ps L«S^] 

+ P [SE*JS ( 3 *S Lo«] P [3 PS Loss] 

+ P [SENS 1 4 PS LOSS] P L* PS LO«] 





'ft*** ^JUujC/ ^t. i£tZ*j£c/ 

’jSfao&Stc L^tsT *4 fee- , &&o- f 2. 

<rw ^ ^ 3 a^yM sfe***- <* ~zfe*Z£0e. 

j/X*t , ^ ^*yu&l jA a^^JZ u L* <XsU- t 



^ I 1 + id't y^' tC* '* *C "Y/fe^YXa. t *$ LU ^ 

4|0 iVi-fp* fl,* 


|~ iyj3w M 4y^Lc**~£ ‘Ttifc&lf&Jt' "J 


s P [crmT^o^inTs^-uCTiorji] "T* “ <*u-^«-*** ^ (2^^s ^ 

" pfnnTi] + p[jnnT3j + pCTannl 

- P£(Ttrtra.) nCrinn)] - pECTinTa) n (TJrtT3)] - P [(TinT*) n (XinT3)] 

+ P£ (TinTa'j n (TmT-s) n(ra 0X3)3 


= 3 [4p’0-fl)+ p*J “ ^[^p'Ci-p.Vpn * TWR® 

^Yifefe cm. /^ru^A. ^oufe^X , Ja****4- 

3 Es^o-j^V p/] - a F3 jo*(i-j<0 +fil ■* THRI 
cfei. Z*</® f "-4 


3 [ SftCi- p> T K ^ ' A tv* $ * f‘3 1 * ™ R 1 


PtsCMs] » PUaOA « HsP « cr u W«L U PCD UTHR U IRO a (nAw»LAuYR&^PR&)] 


* J Ip! 0“p.> 4 p* ♦ l(pfx (l-px) 4 fx 4 *p a 0~p a ') 4 p* 

* Tjo^ o- pO 4 p/ 4 4 p ■ ‘ (I - p 3 > 4 p 5 f 4 T«R® 

* L+f*o-f..) +f' ]£4p,V/-p ,} 4 p/ 4 4p T 'op, N ) 4 p^ 

4 4p,V/-p,) 4 p* 4 4* p? 0‘)O 4 p,/]^ (i-p,J + 

'{bp (/-]£>,) 4 p, 4 I2j0 x + * £>fl 0-fy) 4 ^ 

+ 3p/Cl-ps>ps 4 THR.1 

4 [3 p M a (l- P^ 4 p.. 1 J[ 3p 7 * 0 - pO 4 p 7 4 Jp* (I - p,) 4 p t * 

4 3 P ;o-p ^ 4 p,* 4 3 p^o-pj 4 p, 1 ]^ 40 -pjp- 

4 ^pCZ-p,') 4 p,^ 4 Sp t (l-pO*p a 4 4p* ( I - p^ 4 p* 

4 tp«0*p|) 4 p* 4 ip, (l-p,) 4 p* 4 THR2 
4 [3p„ 0-p „') 4 p„'l[ap 7 (i-p,^ 4 p 7 a 4 Jp % 0-p*) 4 p, 1 

4 Ap, CNp,) 4 p* ♦ Ap„6-p w ) 4 p,.‘33 4 O-pjVa 
+ ?'5+(i-p,^p« 

* w 


\jyjZca. c ^euXuA^. j£l ~£a 

<J£sri4L&4 . ■JJL t pt4+ ^H****^ T&1 s^xXuAJZ. 

^jb**& d + £i£X t jOO^Ao-U t ^JACZ AH OAJ. t sftot+^eK&t 4^Xrt^Ly^ 

a-Xtsie+4. t A ** e£d u l , a***C 'Vhua^t Cer>£&*4. f m J< u ~£& 

"2r^-£ sfVvXtAx. /thjuX &■ I . 



mesh Networks a nt> *3 

/r*5Sit&lX+. <5 <x»+e{ 3> £<L 

SVGA** ,a*c*rr*<J?cVL "Z* 04 /l£st&Le&*w/ 

^la*. sna*fa>dL j t imtAlajl ~a& / 4iA*£*£&i«r 

0^ <=* fjLcZi£ f h j fuAX. U c*M*£z£rH£*/ Cfs 

&&&*& Off A. ^xffu/UL 7 « ^^<4 

. xjh. dLnyfi. tc, 7 c itf*. 

/irt&tA4. <rf w t S, y , o*<*/ & , urhelf aM. ythur*. 

^cr. 


METWork a 


Ww * 

*% - 

Y 7 ? 

%2 * 


+ eu. - ©A 3 * o?«A l 
» % ^ . 




A* - e>~ - ©A* ♦ a©A‘ 


^ + A 3 - ©/«. * ©A* * 3 © A* 

/* * a 1 -a^ + ©a 3 * a©A x *e 


© = p[EK/// / a 7 ,<s, 3 i^,»i i 7 < a 5 ] 

s f [EAJt,**, «.,!«,« M." 3 

= P[EM ^ASjIWi^jS^I 


4 © 
+ © 


HET>/oRK 


ww = ^ ♦ &A V +©- * p[cn n l i7 i ts J ii l ’b t n 

*x * ^ + 6 A v *© - PEen^VV^V^ 10 ! 

if z /c * SA l >© * ? Cfitfi ( *V*r x 1 » '.‘l 5 ^ 

fc-B * /t * VX X 4 e -S p it j 6 j 2 ^ 

<*^"04. && j%4-i£.€. f T> 4 fc ojf 'Jv/ / ty. f yf j 

* * **( BB &frrKC+ veZ&et “&****■ © , 

the j VA«/ y fc< |^y , a^mC BS a 44 OL^noo-^^ £/f 40*0*4, f^i 

*t>G*chr /T4%UfV*i£m ^U 4 , 

o{£A*4*t\* /£eu. 

jf/+& ‘A&ufcC t*Jf£ 






















NETWORK. X 


* 4 













SlETtSoKK 


442 





MCTVoftX ^ 


















• « 







CoH C LUS/otfS 







£ 2 ^ 3 ? a**+£i£4C4. ^L*4vh cm*' ^cr l +*u j£ * J L 

4+JZUrZg. ceotcny. i»C& o. Con^btJti. / 

ur^ccJt Uftk4 dr**. . 

zb. /Uu*o&£i. at^ 7^ ^L 

/jgjLoCt . K^OA*. /ILUu. j££l> "t^dZ liC. 

&4uc*A c&aS, clAx Ad**^*- • s ~^»* ^y^^riXJU. 

/lO^L f sflcusCoeA f ct A* <-^ 4 ^ -^ u+ d 

*<A ^ iSd« 

- <£’«^£Zt<rK*L^ /&*C4*4^ c& XrK<1 ^ ^tr»t25EL^»4^ 

/tMA *rJ~&&6i , A* eUu £Z&t ■& 


04 


C*< 





446 







i 



? 

1 

i 

\ 

% 

h 


l 

i 


i 

} 

* 


i 


! 



U 



9 



i 

14 

13 

1.4 

17 

18 

19 

20 
21 
7? 


23* C 

24 tC 

25 *C 
26* C 
27* 
28* C 
29 *C 
30* C 
31 :C 


‘TC • j" 
ww • 


35 J C 
36 * • 
37: C 
33 • Z 
39 • £ 
40* 
41; 
42 * 
43; 

ii ■ 

<■ cr 

* 

4*: 

4^ ; 
A*. 
4* » 



THIS PROGRAM COMPUTES FAULT “REE TYPE ANALYSIS 
FOR THE PITCH CONTROL SYSTEM 3N THE INTEGRATED 
D I G I T AL Ei_£CTR I C AIRCRAFT * t . D. £. A. > - NAS A . 

D I MENS I ON T I ME < 20 ) 

I NPL I C I T DOUBLE PR EC I 5 1 ON i A— H , P— Z ) 

READ •! 5 » * ) MESH 


READ IN MISSION TIMES 

READ \3i *> N 

READ (5.*) :TIME«IK I*1,N) 

READ* IN THROTTLE LVDT, r'EDAL LVDT , WHEEL 
RVDT. ANGLE OF ATTACK, COLUMN POSITION, HORIZONTAL 
STABILIZER: POSITION, INERTIAL REFERENCE UNIT, NORMAL 
ACCELEROMETER, LONGITUDINAL ACCELEROMETER. PITCH RATE 
GYRO, YAW RATE GYRO. %>. AVIONICS PWR SUPPLY FAILURE RATES. 

READ (5,*) THRT1, PEDl.WHLI.Pl, 01, Rl, SI, Tl, VI, Wl, YRG1, X2 

READ IN SUBSCRIBER LINK, NETWORK NODE, AND SC POWER 
SUPPLY FAILURE RATES. 

READ <3L*> A 1 , B 1 , C 1 

READ IN AC FWR BUS, EMAS MOTOR DRIVE. MECHANICAL* 

AND SIGNAL SELECT FAILURE RATES. 

READ 3, < ' D 1 , E i , F 1 , G 1 

READ IN FAULT TOLERANT COMPUTER FAILURE RATE. 

READ \3»*> FTC1 

CONVERT INPUT VALUES TO UNIT FAILURE PROP ABIC TIES. 


DO 140 >i,N 

A~ 1 . —EXP ( -A 1*7 I ME (I ) / 10**6 ) 
3-1 . —EXP ( -B 1 ».-T I ME i I )/ 10**6 ) 

•:= i . -exp < -c i*t: me < i > / 1 o**6 > 

D— 1 , —EXP i — D**“IME ( D/L 0*** } 
E2* i . -EXP ( -E i *T I ME < I J / 1 ) 

F-l.-EXP<-Fi*TIME< I )/ 10**6 > 
j*I.-EXP(-Gi*7IME< X >/l0**6> 

F 7 C2 *“TC j / 1 0**6 
F7C3*F7C2/ 10**6 
*"“C4aF7C3*7IME ( l > 


“ r-"*FTC4- i F7C4** Z ) /2~ \ r 7C4**3 ) / 6 



If* i r » If* I* * 10 •*“ • If • 











«..n uj m yi 4 ^ w 4 ^ i.o «•.» o* w to ».o •.♦.» w co ».o i) i.j i j k« h> t) i * t-.» io •-• »-* » - •«• i * »- »--* #— i~* »- o o c* c» c* o c 

i.»j tj h 1 O i 1 *V* **J •> »JI w tv* *-*■ O *0 M*» »> t.fl 4 * to tO h O ft) \j ij* ij 4> 1,0 | j *- O -0 tu "4 •> 01 to to *' k Q -f» to i> Cfl 4> ».«. 


SENSOR EQUIPMENT FAILURE RATES 


THRT* 1 . -EXP < -THRT 1*TIME< I ) 
PED* 1. -EXP(-PEBl*TIME( X ) / 
WHL= 1. -EXP --WWLl *7 I MEII)/ 
?- 1 . -EXP < -P i *T iME (I ) / i 0**6 
Q= i . -EXP ( -Q 1 *7 IME < I > / 10**6 
R= 1 . -EXP ( -R 1 *7 IME ( I ) / i 0**6 
S= 1 . -EXP < -S 1 *T IME ( I ) / 1 0**6 
T=1.-EXP(-T1*TIME< I ) / 10**6 
V* 1 . -EXP { - V 1 *T I ME < I ) / 1 0**6 
W=l.— EXPi— W1*TIME< I ) /i0**6 
YRG* i . -EXP ( - YRG 1 *T I ME < I > / 
X* 1. -EXP <-X2*T:ME<I>/ 10**6 
X 1*1 . -X 


/ 10**6 )-XNE7 
10**6) + XNET 
10**6 ) +XNET 
) +XNET 
) -XNET 
) XNET 
>+XNET 
)+XNET 
>+XNET 
) -XNET 
10**6)* XNET 
) 


CALCULATE LOSS SF SUFFICIENT SENSOR INPUT. 


TERM 1 =P** B* ( 4-3*P ) *0**7* < S-7*Q ) *R** 1 5* ( 1 6- 1 5*R > 

TERM 1 5=PED**7* ( S-7*PED ) *WHL**7* ( 3-7*WHL ) 

TERM2«S**3* ( 4— 3*S > 

TERM3— T**3* ( 4- S*T ) +YR0**2* < 4-3* YRG ) *U**3* ( 4-3*V ) -W**3* « 4-3*W ) 
TERM4»P**2* ( 3— 2*P ) *0**?* ( 6—5*0 ) * R**2* ( 3— 2*R ) 

TERM45=PED**5* ( 6— 5*PED ) +WKL**5* ( 6— 5*WKL ) 

TERM5=S**2* < 3— 2*S ) 

TERM6=T**2* i 3-2*T ) *0**2* ( 3-2*V ) +W**2* ( 3-2*W ) +YRG**2* ( 3-2* YRG ) 
7ERM7=P* ( 2-P ) +0**3* < 4-3*0 ) -R* ( 2-R ) 

TERM75=PED**3* < 4-3*PED ) +WHL**3* < 4-3*PED ) 

TERM8=S* ( 2— S ) 

TERM9=T* ( 2-7 5 -V* ( 2-V '• +W* < 2-W > -YRG* ( 2-YR0 > 

TERM 10*3* ( ( 4-3*THRT ) *T«R7**3 ) +*2-2* < ( 4-3+THRT ) *THR7 *+3 / **3 
TERM 1 1 =3* ( ( 3— 2*THRT ) *THRT **2 ) **2—2* ( ( ?-2*TriRT ) *THRT+*2 ) **3 
TERM 1 2=3* ( ( 2-TriRT > *THRT ) **2-2* ( < 2-THRT ; *THRT ) +*3 


PART 1 =X 1 *+4* ( TERM 1 5+TERM 1 0-TERM i +TERM2*7ERM3 ) 
PART2=4*X*X i **3* >. TERM45+TERM1 1 +TERM4+TERM5*7ERM6 : 
PART3=6*X**2*X i+*2* < TERM75+TERM12+TERM7— TERNS^TERM’f* '• 
PART4=4*X**3*X 1 
PARTS* X*+4 

SENS=PART 1 +PAR72-P ART3+PART 4+PART5 

WRITE <6-100) TIME < I ) 

F 0RMA7 v / / / i X » ' T I ME= ; " > F5 . 2 ) 

WR I TE ( 6 • 1 1 0 < SENS 

FORM AT •: 5. X , •• SENSOR FA I LURE PR0B AB I L I TY : ' . E 1 2 . 5 ) 
CALCULATE TOTAL FAILURE PROBABILITY. 

SYST=F7C -SENS+HRSTB+A IL-RUri-TKRCTL 






a " l 


x 54 i C 

155: WRITE (6,120) FTC, SENS, HRSTB, AIL . RUD- THRCTL 

i 56 : . 20 FORMAT U X , I NTERMED I ATE VALUES : ' , 6 ( E 9 . 4 , 1 X ) ) 

157s WRITE (6.130) SYST 

1 53 f • 30 FORMAT ( / / 1 X , ' FL I GHT CONTROL SYSTEM FA I LURE PROS . s ‘ , Ei 2. 7 ) 

15?: 140 CONTINUE 

1 60 • C 

161: WRITE(6, 145) WW, XX, YY, ZZ,UU,SS,TT,VV 

162; 145 FORMAT (//1X,8(E9.4,1X>) 

163s WRITE (6,150) P»Q»R*S»T»V»W,X 

i64: 150 FORMAT (///IX, ■'ECHO: ', 8<E9. 4, IX > > 

165s WRITE (6,160) A, B, C, D, £, F, 0, FTC 

166: 160 FORMAT ( // 1 X , 'ECHO: ' , 8(E9. 4, IX ) /// ) 

167: C 

163: STOP 

169: END 
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